Why would the service account get locked out? Are you using the same service account on more than one server?

To answer your question, we setup new service accounts for each new server, generate a strong password (15+ characters with upper, lower, numbers and special characters), store the account and password info in a password safe (KeePass), set the new account to that password, and use that password during the installation.