To remove computers from ePO using the Active Directory Synchronization task, it is required that the account has access to the: