All:
There is a subset of users that belong to a security group that cannot reset their own password. This security group is a member of account operators. They can reset passwords for other users ,but not their own. The accounts exist in the Users Container in which they can reset other users passwords through ADUC. When they logon to a workstation and try to reset their password they receive "Windows Cannot Change Password because Access is Denied". Any help is greatly appreciated.