If AD account Without Admin Rights
on the domain fails to work, then you must 'Log on' as service for Client Communication Manager (NetIQccm). The reason for the failure is AD account on a domain works 'Log on' as service only if it is having admin rights.
Follow the steps to activate ‘Log on’ service:
A domain account works as 'Log on' if it is having the admin rights defined in group policy (AD).
A domain account with 'no admin rights' in group policy (AD) fails to start the service Client Communication Manager (NetIQccm) as 'Log on.'
If you want to make the non-admin domain account to work as 'Log on' for the agent services, then that user should be part of the Local 'Administrators' group on the computer.
The 'Local System Account' works fine as 'Log on' for both NetIQmc and NetIQccm.
The 'System Admin account' works fine as 'Log on' for both NetIQmc and NetIQccm.