I am trying to go back and figure out the work that a previous network administrator did for our company. Our helpdesk only has access to change the passwords for certain OUs in our domain. Some OUs give them an "Access Denied" error message.
I thought it might be a group policy setting, but this user is in an OU that has group policy blocked from propagating to them.
Any thoughts would be appreciated.