2008 R2 TS/RDS and giving a user access to right to the registry and resetting users

Hi

Two questions:

I have a member of the IT dept who needs to be able to write to the registry on the terminal server but I don't want him to be an administrator on the domain.

He would also like to be able to reset users on the Terminal Server Manager.

Does anyone have any suggestions how this can be achieved?

Thanks