Why an LDAP Operation Can Succeed While an Equivalent SAMR Operation Fails

In our DACL in Depth post, we discussed the purpose of Generic Rights and why they exist even though object-specific rights are available.