diff --git a/ipaserver/plugins/sysaccounts.py b/ipaserver/plugins/sysaccounts.py
index ad579eeed..6b8b16ea6 100644
--- a/ipaserver/plugins/sysaccounts.py
+++ b/ipaserver/plugins/sysaccounts.py
@@ -349,13 +349,13 @@ class sysaccount_mod(LDAPUpdate):
         except (errors.EmptyModlist,
                 errors.NotGroupMember,
                 errors.AlreadyGroupMember):
-            self.allow_empty_update = False
+            object.__setattr__(self, 'allow_empty_update', False)
 
         setattr(context, 'privileged', entry_attrs['privileged'])
         del entry_attrs['privileged']
 
         if 'privileged' not in options:
-            self.allow_empty_update = False
+            object.__setattr__(self, 'allow_empty_update', False)
 
         validate_nsaccountlock(entry_attrs)