- The account under which you will be running the Defender Setup must be a member of the local administrators group.
- To Create and modify Active Directory classes and attributes in the forest schema. By default, members of the Schema Admins group have these permissions.
- To Create and modify control access right objects in the forest configuration container. By default, members of the Enterprise Admins group have these permissions.
- To Create organizational units in the specified Active Directory domain. By default, members of the Domain Admins group have these permissions.