Can the domain administrator update or delete accounts created by a sub-administrator?
Yes, the domain administrator can impersonate another administrator at a lower level and all the functions are available to create, view, modify or delete accounts.