I'd like to setup monitoring on a service running on my DC's. Right now we are using SiteScope to monitor our servers and their services. This is working fine on member servers where the domain user account is a member of a group has local admin rights on our member servers.
This group is also a member of Builtin "Performance Monitors users".
Its a 2003 functional level domain running all 2003 Servers.
My question is how do I give this user account permissions to monitor the service on the DC's without giving the account full domain admin rights (not an option).