What type of permissions must to be the user account in the configured domain?

 

We want not this user is in the Admin group.