Is the account a member of any of these..?
Enterprise Admins
Schema Admins
Domain Admins
Administrators
Domain Controllers
Cert Publishers
Backup Operators
Replicator Server Operators
Account Operators
Print Operators
If so then the AD will see this as breach of security and when the AdminsSDHolder thread (every hour) runs it will reset this permission..
Simple fix, remove the account from any of these groups.
http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2007-03/msg00988.html