We have found an issue after migrating to AD. It seems that the accounts that migrated do not have the Account Operators group listed in their security. So when an AO goes to edit the account, they are denied access. Is there a way in Hyena to add this group to multiple accounts? or does someone know where we could find a utility to do this?