Windows 10: Service Account Admin Rights

We're currently working on locking down our service accounts to least privileged by creating new policies on account creation and use. We're focusing on three categories at this time, interactive, set to all computers and admin rights on servers. I haven't been able to find any recent post on local admin rights. Does a domain service account need to be in the local admin group to run a service? What is the best option to from a security aspect?

:)

 

How to change admin user account name?

ah so main admin account is 'wizzle' which is what I am currently on
I make another account called 'wizzle2' (with admin rights)
I sign out of 'wizzle' and sign into 'wizzle2'.
And once signed into 'wizzle2', then I do the command prompt step and find the SID for 'wizzle' that is listed and go from there?

 

Vista: How to give FULL admin rights to other accounts???

I'm not sitting at my Vista machine right now, but I think it has something do with going into Computer Management, I think you need to add your user account to a group. Perhaps add your user account to the same groups that the built-in Administrator account is in.

That doesn't work in Vista. When you set an account as an admin account, it is really like setting it as a Power User in XP. It still bugs the crap out of you every time you try to do something that requires admin rights.

 

Vista: How to give FULL admin rights to other accounts???

Doesnt me... I'm running vista. my account is an admin account I never get any annyoing messages or pop-ups. only for unsigned drivers or if kaspersky finds something, or blocks a pop-up