I want to give privilege to an ordinary user to run RAS Admin (at the console). He periodically needs to check whether the service is running, and who is logged in. I do not want to add him to the Administrator group. How can I do this? A thorough search of Technet and the usual NT manuals have yielded no clues.