Security
If the inputs specify an Active Directory user, the caller must
be a DomainAdmin, OrgCreator, or OrgAdmin. OrgCreators and
OrgAdmins are allowed to change this setting only for users in
their organizations.
If the inputs specify a local machine user, the caller must be a
domain user who is an administrator of the specified server.