Monitoring Domain Controllers

Monitoring Domain Controllers

What is the best practice to monitor domain controllers without using a domain admin account?