You need to give User1 administrative rights so that he can manage Group Policies for the Security OU
You need to delegate the administration of DHCP to meet the following requirements: Allow branch office administrators to manage DHCP scopes for their own office