My Account Operator group is denied access to users to manage accounts. This is supose to be a default ability in the Account Operator group. How do I get it back? We are running NT4.0 and updating to Service pack 6a did not help.