I have two AD server, I have the control of the main AD server and the other
AD server is sitting at the branch office connected via site to site VPN.
Since I am the enterpise domain admin, I have the control of everything.

both domain is "abc.com" level, there is no sub domain.

Since I have another domain on my branch office that is not in my country. I
intend to creae a aacount with minimum right for the remote branch
administrator just to shutdown and backup the server data if necessary. I do
not intend to give any higer right that may compromise my AD security.

Which is the best account typr I shoould give or is theer any registry that
or GPO that I can modify an account to give the require right