The complete error received is: "You cannot program a Defender Desktop Token as you have not been assigned the correct rights to create tokens." This occurs when using the Defender Integration pack for ActiveRoles Server.
An Active Directory (AD) group has been delegated the "Defender- Administration" access template through ActiveRoles Server (ARS), but members of the group cannot program a Defender Token in the ActiveRoles Server web interface. They can program a Defender Token in Active Directory using the native tools, i.e. ADUC. They receive the message "You cannot program a Defender Desktop Token as you have not been assigned the correct rights" and the page is grayed out.