Hello, I have a question because with our domain admin accounts we could connect to WEM Console OnPrem without any problem, before we add our domain admin accounts in Protected Group. Is there an solution to resolve that ? For now we all have to use one domain admin account which is not in protected group in active directory to access Wem Console. Thanks.

Imho no. Same problem with a bunch of other systems. You should create a second "Admin" account for such systems without! Domadmin privileges. And then configure these accounts in wem with admin roles.

you can Select an existing user from WEM global full-access administrator group or Create a new user and add the user to the WEM global full-access administrator group. https://docs.citrix.com/en-us/workspace-environment-management/current-release/install-and-configure/web-console#configure-and-start-the-web-console