Global updates need to be made to Active Directory, and this user account isn't a member of the 'Enterprise Admins' group. ...