Getting an administrator account for discovery purpose is always a difficult part. In Linux/Unix environment commands can be controlled by using sudoer file. Whereas windows it is very hard. Most of the discovery tools uses WMI queries to collect information. The following steps helps to setup WMI access for a non-administrator account.
1.Enable WMI through firewall
2.Add the service account user under DCOM Group
3.Add the service account user under Power User
4.Provide namespace access at root