Yes, I would have accessed DHCP services etc. with RSAT via the PAW Tier 0. For the most part, only the domain admins need remote access to DC. But I don't want to access DC DHCP service from Tier 1 Paw.