stuff to make active directory better.
Service accounts should not be logging in interactively. You help desk genius should not be using...