We just had a vendor setup some new SQL servers for us and they accepted the default user accounts for all service's. Current SQL best practices is to have each service account isolated and also least privilege. My end goal is to have each service run as a domain user account and then delegate only the permissions necessary for them to run. Is there any configuration wizard that can be used to update the service accounts. I know if it change it in services.msc it will only grant the log on as a service permission and it will not make changes to per folder ACL's or other security permissions necessary.
Using SQL 2012 STD if that opens up any additional options.
