To successfully run the Windows Users and Groups Connector and obtain all of its functionality, the Connector must be run in a process owned by a user who is a member of the local Administrators group, and have logon privileges to the domain controller and other domains (if accessed).
This precondition can be omitted if the UserName and Password parameters of the Connector are set to specify an account with the requirements stated above.