- Install version 18.104.22.16891 or above of the Management Portal
The latest version is availalbe from the below link
- From the Management Portal | System Configuration | Roles tab | Tick the "Always use System Service Account" option
- Restart the "Defender Web Interface" from IIS
22.214.171.12491 release notes:
"Included an enhancement to optionally use the configured System Service Account for all AD interaction. Currently a combination of both the System Service Account and the logged on user account are used, for example, during token registration. This option is available on the 'Roles' page within 'System Configuration'.
If this option is enabled the system service account must be assigned the required permissions by running the Defender Delegate Control wizard from the Defender Administration Console."