I would like to give a particular user privileges to run WMI queries on any computer in the domain (Server 2008 functional level) without making that user an administrator.
There are nice guides for how to allow any user to access WMI (like this one), but I can't possibly do that on every computer in the domain.
How can I set DCOM permissions for the whole domain?
Reason for all this: I am running a program like SpiceWorks as a service, and I would like to allow it to query computers on the domain, but not install software or change the clock, etc.