Is this user a Domain Admin, or part of a group with special privileges in Active Directory?
http://www.blackberry.com/btsc/searc...00%20174518448