Perhaps an even easier way to do that is to run a repair and choose the option to set WBEM access to a non admin account, this way you need an admin account to fix the rights but then a non admin is set to be used to access the server. So the admin account is not saved in SIM but just used to set the non admin to be able to access the server.
This probably only works on member servers not DC's
This probably only works on member servers not DC's