minimize accounts with domain admin rigths

Now it seems that each resource of the type windows domain has to have an account with domain admin rights to be able to make a password reset and/or service account reset.

Under resource edit: "Supply Credentials for remote synchronization":
It would be nice to be able choose "administrator account" as it is now, but also from what resource the "administrator account" should be taken from.

"Supply Credentials for remote synchronization": yes/no
"Rosource name" >NAME<
"administrator account" >NAME<

And the resources to selected from should also be from shared VIEW / Modify _/ Manage