Sharepoint 2013 Service accounts

Question

Hi,
My current client has SharePoint 2010 and 2013, for all the web application and service application they have been using only one account, which is think is not suggested by Microsoft (correct me if i am wrong)
i agree that each admin have their own point of view, but will the below explanation suffice and can this be suggested to the client and suggest them to use dedicated applications pools for different web applications.
As all the web-application pools are running under the same account there is a possibility that the account might get locked due to which the other site collection, which are running under the same application pool ID,  will also be getting the error
message "Service unavailable" by maintaining different application pools, other web applications/site collections will not be effected.
Please advise.
Satyam.

Answer 1

The accidental locking of an account is probably the LAST concern, since that suggests that lockout policies are effectively blocking attackers.
The primary concerns focus around the permissions granted to the accounts, and how they're used... this is why different architectures and environments will have different service account use/reuse/isolation requirements.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs