Minimum credential for WMI parameters Monitoring?

I'm developing a big project to monitor a remote machine's performance parameters like CPU,Memory,Diskspace through C# WMI. I want to use the minimum possible credentials to connect the remote machines. Beca开发者_StackOverflowuse I don't want to bother my client to ask for the super-user credentials. Its sure that if I disabled the firewall and use the super user credentials, WMI is fine; but resource monitoring in such environment means giving lots of space to the system intrusion for the hacker. So, my main question is what is the minimum system vulnerabilities that we can expose for the remote machine for such monitoring?

Best is to setup a domain user account that have WMI access and all, set it up in the Active Directory (This includes pushing updated firewall rules to all machines etc, enable your user for WMI monotoring on the machines). Typically this user can't do anything else, not perform a local logon etc.

Then in your code just do Impersonation with that user.