Dave has been tasked with drafting his organization's security policies. What is a commonly implemented policy for service accounts?

A typical approach is to disallow service accounts from having access to interactive logins for GUI or shell. If a service account is used for interactive logins or an attempt is made to log in as one, it should be promptly identified and reported as a sign of a potential breach (IoC).