Service accounts best practices

From: Ferdie (ferdie_at_sand.rr.com)
Date: 06/16/05 

Date: Wed, 15 Jun 2005 16:19:57 -0700

Can someone point me to a guide to securing service accounts? I have some
accounts that require Domain Admin rights (or so they say), but don't need
to log on locally. I'd like to remove that right, so that they don't use it
to bypass the logical access control. There might be some other issues that
come up, so I might need a guide.

Thanks,
Ferdie