App-ID(s) for Computer Management Snap-In?

Does anyone know what app-ID(s) are required for the Windows Computer Management snap-in to work correctly?

Currently in the app-ID group we have

• active-directory-base
• icmp
• ms-directory-service-setup
• ms-eventlog
• msrpc
• ping
• rpc
• traceroute

This policy is for help desk/sysadmins to remotely check the Windows event logs, services, otherwise manage user workstations.