I need to delegate permissions to edit user information (phone numbers, address, etc) in AD. Its a 2003 domain. Ive already delegated: 'Read all user information' and 'Read, Write, Read and write general information, Read and write phone and mail options, read and write public information, read and write personal information.
So far none of these have helped the specific user edit details. Its been logged off and back on already too.
What am i missing?
Oh, that sounds like AdminSDHolder protection. Check if inheritance is disabled for the users' ACLs, and/or check the value of the adminCount property on the objects. This occurs for users that are in (or sometimes, were once in) one of the protected administrative groups. See here.