Unable to change CNO Security

In a failover cluster, in Windows Server 2025, if I change security of the CNO, after about 1 hour, the security settings rollback and inheritance disabled.

This cause access denied when CNO try to change password every hour.

If I add the correct permission the CNO is able to change account password but after about 1 hour the security rollback to wrong settings