Question: are service accounts interactive logon?
Answer: Service Accounts Can Be Secure Yet Have Non-Expiring Passwords. Deny logon locally is a Group Policy Object (GPO) setting that should be used for all service accounts because it shuts down one avenue of exploitation—an interactive logon (e.g., a logon using Ctrl+Alt+Del) to a system with that account.