Does anyone know if its possible to connect Desktop Central to AD without having a domain admin account? I don't want to have to assign the service account domain admin privileges. Ideally, we can assign it specific permissions to read/enumerate user and computer accounts. I would be surprised to find out if banks or government agencies would allow a service account to have full domain admin privileges.

Can we get more granular with the permissions required for the service account that connects DesktopCentral and AD?