When we upgraded Active Directory to a newer version, we were able to use the Protected Users built in group to enhance the security of our privileged accounts. Unfortunately, members of this AD group are denied login to the Kace admin console. Our only recourse is to remove our privileged user account from that Protected User group and lower the security in other applications.