I have an Active Directory containing domain users for all employees that are used for computer login, file server permission, access control RDP, etc...
Also, I have more than one service that running as a Windows service and IIS Pools, and these services need to be run with domain user, so how can create a domain user will just be used to run specific service only without other functionality like computer login.