adclient.get.builtin.membership
This configuration parameter determines whether the agent checks for valid users in built-in Active Directory groups, such as Administrators. By default, this parameter’s value is false, in which case, the adclient process ignores members of built-in groups.
To include members of built-in groups, set this parameter to true in the configuration file:
adclient.get.builtin.membership: true