Required permissions

Use an account that is a member of the Domain Admins group in the Active Directory domain for which you want to raise the DFL.