Restrict access to "Write Office Location" attribute

hi, trying restrict access "office location" (physicalofficelocation) field in users account delegated administrators.

i have enabled the field in dssec.dat file , can see "write office location" , "read office location" fields in wizard.

delegation has been setup on our domain below.

delegation tbg - ad user create

delegation tbg - ad user create restricted

delegation tbg - ad user modify

delegation tbg - ad user modify restricted

the ad user create security group works expected.

we have requirement further restrict access create or modify user attributes.

these "office" field on general tab,

the "home folder" , "profile path" field on profile tab.

our issue occurs when setting (deselecting) the "write office location" and/or "read office location" during delegation of control wizard.

when click finish, receive following message.

"security information obtained active directory not edited. parameter incorrect."

when select both "write office location" , "read office location" wizard completes successfully.

can 1 please provide assistance in how can set read / write office field can lock down subset of administrators.

thanks in advance.

rob

checking in see if 1 in community has delegated above , if may able assist me this.

Windows / Windows 10 / Security & privacy / PC

Brazel