Often operate SQL Server services by utilizing the bottom feasible consumer legal rights. Use a MSA, gMSA or virtual account when achievable. When MSA, gMSA and virtual accounts are not doable, use a particular reduced-privilege consumer account or domain account as an alternative to a shared account for SQL Server services.It’s a great exercise