The "Synchronize directory service data" setting should be configured correctly.
[]
(1) Computer Configuration/Windows Settings/Security Settings/Local Policies/User Rights Assignment/Synchronize directory service data
oval:org.secpod.oval:def:18967
SCAP Repo OVAL Definition
2014-05-29