One of our CA Automation Point r11.5.1 customers had some Active Directory GPO security settings such that all of the AP Administrators who are responsible for the configuration of their Automation Point servers must login to each Windows Server as a standard user who belongs to the Administrator Group. Those admins had been using a common service account and its credentials to login to the servers and update AP configuration. The following knowledge document was published based on the customer's specific questions about using configuration manager and how AP would be impacted given the new Active Directory policies affecting his users:
http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec1411342.aspx
Questions?