How can I monitor Active directory without giving domain admins privileges to the application manager user?

else How can monitor any machine without using an administrator account?

Thanks in advance

Carlos J.