To implement read-only access with access to Event Viewer and Performance Monitor

Add or remove computer objects from a security group in Active Directory

Set up a PowerShell script that runs periodically on your domain controller to check for new servers. Here’s an outline of how you can approach this: