Full read-only access to everything

[Alex Krugor]

Hi!
Please, give advice!
It is necessary to have domain account with the read-only rights to reading
of any configuration information in the domain (application/system/security
logs, access permissions, adjustment of services etc).
I.e. some analogue of the auditor
That needs to be made?
Thanks