I want to create AD User in the domain give specific permission to the user something like ,Grant permission in Active Directory to add users / modify / changed password / add them to group them but not delete them.But the same time that AD user must be RDP User.Is it possible then How ?
Yes, it is. Those are different kind of privileges:
Assing the permissions needed using the Delegation of Control Wizard.
You could add the user to group
Builtin\Remote Desktop Usersto give RDP access.
Members in this group are granted the right to logon remotely
In order to manage Active Directory users this user doesn't necessarily need RDP access to the server. It's also possible to install Remote Server Administration Tools on any workstation.