I'm setting up the asset management domain scan, and I'd like to create a new AD service account to handle this. I don't want to grant more rights than are necessary, so I plan on just giving it read-only rights to AD, and sufficient rights on the local workstations to perform WMI queries.
Since this is not covered in the documentation, can someone give me specific requirements for this?