Which account is being used by the Client Deployment to Assign Scripts on the Active Directory?
By default the Service account used for the Desktop Authority Manager service. This option can be changed in the Desktop Authority Setup tool on the Global System Settings tab, in the Impersonation Settings.
Check the box "Allow Desktop Authority to access Active Dicectory and Network objects under the context of the user logged into the web console".
B