Minimum rights required to run a windows service as a domain account

1. Edit the properties of the service and set the Log On user.
    The appropriate right will be automatically assigned.

2.  Set it manually:
     Go to Administrative Tools -> Local Security Policy -> Local Policies ->
     User Rights Assignment. Edit the item "Log on as a service" and
     add your domain user there.