our security team will not let us utilise a domain admin account as, correctly, there is an account with the permissions required that isn't domain admin.

its poor security and design principal to fall back on domain admin credentials!