Security Manager’s Journal: Rights can be so wrong
Windows service accounts used by software are often given domain administrator rights, just because it's quick and easy. That sort of thing rubs security managers the wrong way.
Story added 2. April 2013, content source with full text you can find at link above.