Not able to disable the user useraccountcontrol 546

Hello All,

We are using SAP based identity tool for creation and deletion of Active directory users. In Active directory we have recently promoted 2012 Domain Controllers. We have provided all the necessary rights to the tool for creating and deleting the users.

For the last 4 years that tool always uses 544 upon creation of id, with 2008 r2 sp1 Domain Controllers. But last few days the Ad ids are not able to disable via 546. Attached is the error seen in identity tool.

Apart from Domain controller change from 2008 r2 to 2012 r2, there was not a single change in AD? Is there any difference in user account control in 2008 r2 to 2012 r2?

Thanks HA