Members of the Account Operators group can not manage restricted group members.

The following groups are restricted to Administrator management:

Account Operators         local
Administrators local
Backup Operators local
Print Operators local
Server Operators local
Domain Admins global

If the account being managed is not a member of a restricted group, it is a member of a global group which is a member of a restricted group.