This account needs Read permission to the scan processes in Active Directory Domain Services and to the scan destinations. ...