Use a Forescout eyeSight administrator group

You can create a new user account in the Global administrator group. This option may be used with Windows NT-style domains.

1. Log in to the Domain Controller as Administrator.
2. Create a new user account called "CA_account".
3. Make the CA_account a member of the Global group Domain Admins.
4. In the Member Of section of the group properties, keep only the Group Domain Admins and remove any other groups. The Global group Domain Admins should be used for access to remote systems as this group is automatically added to the Administrators Local group on each system when it becomes a member of the Windows NT domain.