Access to Applications

[LeonieCol]

Anyone aware of ways that access can be limited on certain applications on Server 2008?

I need my technicians to be able to access Active Directory and various other things on the servers like event logs, but there are some things I do not want them accessing like Group Policy, Exchange Management, Sophos Console.

I know the obvious thing to do is to tell them not to use the applications but I don't suppose anyone is aware whether you can password applications like this?

[sukh]

If they dont have rights to perform those tasks they cant do anything. Or create roles and restrict thrm

Dont let them logon to server, use RSAT and permission them to look at event logs.