account operator problem

I have NT4.0, sp6a, I created an user with account operator privledges. When I log on to the PDC or any BDC with that profile I am able to access and modify the global and local GROUP accounts. However, when I try to access an individual profile (for example to unlock an account) I get an Access is Denied message. I do not know what would cause this. Any help would be appreciated. Thanks.