I guess no one knows...

[adoyt]

I've set up a terminal server for my remote technicians to
work off of. They get errors when they open up dsa.msc
(AD user and comp's), unless I make them local
administrators.

How can I avoid making them local administrators of the
server?

 

[Vera Noest [MVP]]

Which errors do they get? Anything in the EventLog?
Check if this puts you in the right direction:

"Access This Computer from the Network" User Right Causes Tools
Not to Work
http://support.microsoft.com/?kbid=257346

You Cannot Interact with Active Directory MMC Snap-Ins
http://support.microsoft.com/?id=329887