Same here.  1000+ alerts at the time of writing. ... View more

I searched for a good half hour and couldn't find this. Bookmarked. I bow to your superior Google-fu. Thank you! @WadeAlsup wrote: @WadeAlsup wrote: They actually address this in the documentation.    "User permissions for AD integration While the AD integration account does not have to be a domain admin, it is usually the easiest way to implement this feature. If using a domain admin account is not possible or not preferable, ensure that the account has the necessary permissions to perform the following actions: Query the user database via LDAP Query group membership via LDAP Query the domain controller via WMI" See here See here   ... View more

Hmm... It could be AD Architecture. We're a single Forest/Domain. If authenticating across domains/forests, I can see additional permissions being necessary. ... View more

Has to be. My service account is running as a standard domain user and I just tested again and it's working. Just for a sanity check I looked at Domain Users security group to be sure it didn't have any extra permissions delegated by a previous administrator and it is bone stock standard.  Likewise I double checked the service account and it is only a member of Domain Users.  ... View more