As a general rule, when creating service accounts to work with applications, special care should be taken to ensure that the services have only the rights they need to do their jobs. Rather than simply making a service account a local administrator on a given server, take the time to determine what rights it actually needs and grant them through the Local Security Policy editor.
1. Click Start, Administrative Tools, and Local Security Policy.
2. Expand Local Policies.
3. Click User Rights Assignment, as shown in Figure 12.14.
4. Choose a right that needs ...