Service Account Permissions

The account used to connect to your Active Directory instance must be added to the 'Account Operators' group so that it can update the properties of the accounts in your directory. If the account used is not part of this group, you will get an access denied error message.

For the sample application I am building, the 'svc_adweb' service account is part of this group on my local domain.