Some time ago I delegated rights to the desktop guys to create/delete computer ... AD will just "forget" admin user rights (most commonly with Exchange) and the only real solution is to make a new ...