The "Synchronize directory service data" setting should be configured correctly. [] (1) Computer Configuration/Windows Settings/Security Settings/Local Policies/User Rights Assignment/Synchronize directory service data oval:org.secpod.oval:def:18967 SCAP Repo OVAL Definition 2014-05-29