I have a user account in an Active Directory domain. Despite this user account having the Read personal information and Write personal information permissions set, when logged in as this user, I cannot change their first name or surname.
What actual access do the permissions Read personal information and Write personal information entail? Is there any easy way to find out for any of the "general" permissions (i.e. any permission that isn't Read/Write thisAndThat attribute)?
The DC is a Windows 2012 machine and I'm accessing it using Active Directory Users and Computers (
dsa.msc) from Windows 7 SP1.