Ok, my next question...am I missing a group attribute that I could change in Active Directory to allow remote access without running as local admin?
For instance, I get errors of "Access denied" from many objects in the web interface unless I am running them from the server.
So, i essence, this renders the web interface a bit useless.
Let me know if I'm not making any sense, and I will do my best to get more detailed information!