Active Directory write permissions let edit users information but not administrator-users information
Solution 1:
Probably the SDAdminHolder feature. It blocks permission inheritance for accounts that are members of the protected groups. You could confirm this by inspecting the permission on the accounts, and the permission of the account parent container.