The ESM agent must be running as either an enterprise administrator or a domain administrator. The user that you decide to use must have at least read level access to each share that is scanned. The enterprise administrator is the suggested configuration. If the agent is running as a domain administrator, it is limited in its ability to gather data from other domains.