adclient.get.builtin.membership

This configuration parameter determines whether the agent checks for valid users in built-in Active Directory groups, such as Administrators. By default, this parameter’s value is false, in which case, the adclient process ignores members of built-in groups.

To include members of built-in groups, set this parameter to true in the configuration file:

adclient.get.builtin.membership: true