only read admin rights

[christian mathieu <admkris () wanadoo fr>]

Hello, 

I would like to know if there is a way to create an account on a win2K 
machine, that has admin rights to be able to look anywhere in the machine, 
but could not modify anything. The goals is to allow some admins to look 
at how we secure the box without giving "real" admin passwords

Thanks,
Chris