No answers to your specific questions, Jeff.

But one other consideration in somewhat locked-down environments is password
policies. It's possible that your network people may want to use managed
service accounts. https://technet.microsoft.com/en-us/.../dd548356.aspx

jf