How to setup Change Auditor Coordinator for Multiple domain in one Forest (4288712)

In the scenario where one Forest with several Sub Domains where Policy prevent adding Coordinator servers to the Root Domain, which Admin Account should be used to install Change Auditor Coordinator?

During the installation, Change Auditor (CA) will create a Security Group in the Domain of the logged in user.

• It is recommended to use Domain Administrator Account to install\upgrade CA

What are the requirements to allow connectivity between the Sub Domains and the Root Domain?

• All Coordinators and Agents must have LDAP and Gobal Catalog (GC) connectivity to all Domain Controllers in the Local Domain and the Forest Root Domain