Microsoft Windows hosts - domain scanning
The user account provided for authentication must
• have administrator rights
• be a Security type of account
• have global scope
• belong to the Domain Administrators group
• meet the Group Policy requirements listed below: