Hi,

I hope to get some leads from here.

I will be implementing a mirrored distribution of adtempus. The master server will host SQL Server 2008. All the remote agents will connect back to the SQL Server residing to the master server. I'm using Integrated Windows authentication. In this scenerio, I will need to use a service account (domain user) to run the adTempus service in the remote agents. This service account must a local administrator of the remote agent.

My problem lies in this. All local administrator accounts will be two factor authenticated. Therefore, it will fail if I use local administrator as the service account.

Is there any way that I use non-administrator account for the service account? For example, give permission to run the registry, etc...