When using a non-agent based scanning method, your scanning account
must have local administrator rights on the client machine; there is no way around this.
The only other option is to scan using LsPush instead. LsPush is an agent that is run on the client machine and performs a full local scan. LsPush can be deployed using a logon script or GPO and the scan results automatically integrated into your database. More info on this scanning method can be found on page 32 and beyond of
our online documentation.