JSI Tip 1828. Account Operator receives 'Access Denied' while managing accounts?

Members of the Account Operators group can not manage restricted group members.

The following groups are restricted to Administrator management:

Account Operators	local
Administrators	local
Backup Operators	local
Print Operators	local
Server Operators	local
Domain Admins	global

If the account being managed is not a member of a restricted group, it is a member of a global group which is a member of a restricted group.