The Microsoft Exchange team post another in-depth article on Exchange 2007, this time on delegating Active Directory permissions. Please note that some of this seemingly Exchange 2007 related article also apply to Exchange 2003 as the ADSIEdit and DSACLS tools also work well (even with Exchange 2000).
Read it here: