Move Computer Accounts from Computers container to OU

Question

I created a global security group called "IT Support", and I'd like to grant this group the permission to:
1. Join computers to domain
2. Move newly created (or already existing) computer accounts from the Computer container to a specific OU and sub-OUs
3. Modify group memberships for computer accounts (new or existing)
I can't seem to get this right...can someone help me complete this task correctly?  
Windows Server 2008 R2 (domain and forest level).
Users will be using RSAT for Win7 (x86).
Thank you!

Answer 1

I would like to start with a Wiki article that shows to delegate administration in Active Directory
Delegation of administration in Active Directory: http://social.technet.microsoft.com/wiki/contents/articles/20292.delegation-of-administration-in-active-directory.aspx
My answers to your questions are:
1.
Read that: http://social.technet.microsoft.com/Forums/windowsserver/en-US/1185fb93-913c-42e3-bcfc-dfbbba57a2bc/joining-a-computer-to-domain-by-delegating-to-domain-user?forum=winserversecurity
2.
Delegate moving user, group and computer accounts between Organizational Units in Active Directory: http://social.technet.microsoft.com/wiki/contents/articles/20747.delegate-moving-user-group-and-computer-accounts-between-organizational-units-in-active-directory.aspx
3. You can delegate that as a task on the target groups using Active Directory Delegation of Control Wizard:
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password