I work in an environment where they repeatedly fill in every single group policy entry available, and they often change ACL's on our server drives without warning/permission. Attached is a working in progress list I've created over the years that contains everything from what kind of permissions accounts need, what registry entries are required, and what file permissions are required, along with hints and warnings about what happens when you've deleted them. I've compiled this list over the last 4 years and keep finding more to tuck into it. It's a fabulous reference. Updated 24 Jun 2014
Service Accounts Clean.xlsx (53.9KB)