I run this command from Command Prompt: 
   dsquery user -samid DomainUser | dsmod user -acctexpires -1
(where DomainUser is other user)

Then i got this message:
   dsmod failed:CN=DomainUser Test,OU=Caribean,DC=plata,DC=com,DC=do:Insufficient access rights to perform the operation. type dsmod /? for help.

The user can do any change from AD
The command run normally with Domain Admin Accont

the question is:
what the access rights i need granted to DomainUser?

thanks in advanced