title: Minimum rights required to run a windows service as a domain account
body: <p>Does anyone know what would be the minimum rights I would need to grant to a domain user account in order to run a windows service as that user?</p>
  
  <p>For simplicity, assume that the service does nothing over and above starting, stopping, and writing to the "Application" event log - i.e. no network access, no custom event logs etc.</p>
  
  <p>I know I could use the built in Service and NetworkService accounts, but it's possible that I may not be able to use these due to network policies in place.</p>