Protect computer from a remote console

Hello,

I've an issue with the protect computer option when launch from a remote console. The account set to push the install on the client must be in the administrators local group of the server where my remote console is connected to !

So the account to install clients must be administrator of the server launching the shcedule task !

Is it normal ?

I tried to find if there were policies on the server where I had to add the account used to push but not found...

If anyone can help me on this point... How to Protect Computer with a domain account without having this one admin on the sophos server ?

Thanks in advance.