Yeah, that is what I'm thinking. It's hard to believe microsoft would just outright disable special permissions, but it does seem to be a recent occurence. And there's only two of us who make AD changes, so it wasn't configured on our side.. I guess I'll have to take it up with them.
Thanks,
CH