[cvsnt] Least Privilege configuration for CVSNT service

[news.microsoft.com]

Hi there,

since I hope to save time without going into deep testing, is there someone
who can tell me the least necessary privileges the CVSNT Service account
need to do his job ?

I'd like to change the current common praxis: running as SYSTEM
So it can run under a special account with only the rights it needs.

It seems to need this:  SeTcbPrivilege (to impersonate)

Some hints ?

Regards
Emmanuel Zaspel