Several supported domain-joined servers run a service needing automatic password management under a shared service identity. Which account type should be assessed?

1. A group managed service account
2. A disabled user account with no service configuration
3. A personal administrator account with a never-expiring password
4. A local account assumed to be automatically identical across servers