NON Admin access to DC

[Firefox]

Hello,

 

I am trying to provide access to non domain admins the ability to logon to DC's and run certain MMC's

 

Services

Eventlog

Perfomance & Alerts

ADUC

 

This is so we can delegate the responsibility without providing unnecessary access.

 

I have seen this is possible by a domain admin manually changing the security settings of the MMC's in question. But I ideally need a way to control this via group policy so I can make this the case for all DC's

 

At the moment I am able to provide the logon ability, but I am simply told that the everything is being blocked by group policy

 

Any Suggestions?

[tonyd]

I'd install Download: Remote Server Administration Tools for Windows 7 with SP1 - Microsoft Download Center - Download Details on the workstation, then you can use custom MMC to provide access to just what they need without having to logon to the server itself. If the users do not have Win7 workstations, then maybe you could allow them to RDP onto one instead?

[Firefox]

Unfortunately when trying to use the performance monitor tool to connect to a DC in another domain we get the error below

 

"No Such Interface Supported"

 

We run the tool with an account from the same domain as the DC, it loads perfmon ok, but will not let you connect