Ensure users with SeAddUser privs get full access to