THE OFFICIAL BLOG OF THE SBS "DIVA"

1. Download the Administration Tools package from the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=95703).

2. Open the folder into which the package downloaded, and double-click the package to unpack it and start the Microsoft Remote Server Administration Tools Setup Wizard.

   	Note
   	You must accept the License Terms and Limited Warranty to begin installing Administration Tools.

3. Complete all the steps required by the wizard, and click Finish to exit the wizard when installation is complete.

4. Click Start, click Control Panel, and then click Programs.

5. In the Programs and Features area, click Turn Windows features on or off.

6. If you are prompted by User Account Control to allow the Windows Features dialog box to open, click Continue.

7. In the Windows Features dialog box, expand Remote Server Administration Tools.

8. Select the remote management tools that you want to install.

1. Click OK.

And there ya go....

Just remember if you log in as "you" and not as a domain admin you'll see inaccessible on some of the domain policies.

I think you'll want to add this as your tool bag as well... in fact it's a MUST have if you are a lazy bone like me and don't want to relog into the domain. 

ShellRunas:
http://technet.microsoft.com/en-us/sysinternals/cc300361.aspx

Go to the command line.. do ShellRunas /reg to make it register into the tool bar

And then you get this:

Which allows you to enter domain credentials

Please read Dr. J's Security Resource Kit for the fact that I have now "But suppose the user logging on to the workstation is a member of the local administrators group on the server. And say the domain administrator frequently logs on to the server. .....However, in this case, a user who logs on to the workstation is a member of the Administrators group on the server. Thus, the security of the server is dependent on the security of the workstation. That means the security of the entire domain is dependent on the security of the workstation. And, guess what: the user on that workstation just unwittingly ran the attacker's tool."

In this case I have no choice.  I must use a workstation to admin the Vista group policies as I cannot at the server. I know I'm adding a bit of risk logging in as the domain admin on a workstation, but it's an acceptable risk I take.