I've held off the push for installation...
....and this kids is why you don't give service (or MFP print) accounts domain admin rights.
no matter who asks for it, they don't need domain admin rights, I'd go out on a limb here to suggest that anyone who insists on having domain admin rights doesn't know what they are doing and should be escorted off the premise quick sharp.