Setting the Active Directory user account for SSO agent requires the following 3 steps:
Creating the account
Read privileges in the event viewer
This account has to belong to the group that has read privileges on the directory’s event viewer. Open the folder Users to add it to the group.
- Double-click on the accountchosen from the list,
- Click on the tab Member of,
- Click on Add,
- Click on Advanced,
- Click on Find now,
- Double-click on Read on event viewer,
- Click on OK,
- Click on Apply.
Privileges to open a session as a service