UserAccountControl is alway set also if not explicitly required.
This behavior has to be changed in order to permit user management to administrators with restricted rights.