I have a internal webapplication With a list of all the servers in our network. I want to be able to run a few PowerShell commands on the servers to gather usefull information. Invoke-WMIMethod and Invoke-Command. I only need permissions to read from the servers. This Works good on the servers I have local admin on, but it's not an alternative to make a service account that is local admin on all the servers.
So how do I set up the right permissions on the service account used on IIS Application pool to get read only remote access that will make me able to run these PowerShell commands?