Any reason why you add Admin Group as a subgroup of Standard Users?
You can keep Admin Group on its own and still make it an admin group of Standard Users:
- In your Access Level, you'll have to add some rights under General (add objects, edit objects, change password, copy objects, view objects).
- In Users and Groups, add Admin Group as a principal of Standard Users group, and assign Admin Group access level.
- Add Admin Group as a principal at the top-level of all users to be able to create users.
It should be enough to permit Admin Group users to create users and assign them to Standard Users group.
Frederique