I created an account in Active Directory and made it a member of the Account Operators group. I noticed that I was able to reset a password on an account that was a member of the Administrators group. According to manuals that I have read, this should have been restricted. Is there a way to prevent this from happening?