For the AD user running the SQL Server service and/or the SQL Server Agent service and/or the SQL Server proxy user:

1) NOT an administrator! Just a regular user.

2) Group Policy

gpedit.msc

Computer Configuration

Windows Settings

Security Settings

Local Policies

User Rights Assignments

Act as part of the operating system

Adjust memory quotas for a process

Bypass traverse checking -- proxy user use, I think

Lock pages in memory -- a subject of some debate

Log on as a service

Perform volume maintenance tasks -- required for instant file initialization

Replace a process level token -- proxy user use, I think