The {0} must have read access to Active Directory. By default the tool will use the currently logged-on account, and will ...

The {0} must have read access to Active Directory. By default the tool will use the currently logged-on account, and will automatically find and connect to a suitable global catalog server.  The account that you are logged on with will also need administrator or equivalent access to each Exchange server.