SCM Without Agent or Domain Admin Service Account?

My company is very wary of installing additional agents on our servers.  At SWUG, another idea was to use a Domain Admin service account which won't fly with our security team.  Is there a way to use a customized service account that isn't a Domain Admin?  Thanks!