Using the BUILTIN/Administators group for service account is not recomended by Microsoft or any AD Engineer who knows what the group is for. Since one can not mangage Sites and Services and other tasks not related to users, computers and groups, people shouldn't be granting Domain Admin either. I'm going to try Account Operator however, microsoft recomends not using that built in group and tayloring rights through Group Policy Users Rights assingments. I and other are asking what rights to set. Adaxes should consider this and propose the correct user rights assingments neccissary for the service account.