I have an exchange cluster and without domain access it's a bitch. In addition I have software the requires local admin, or box admin privy. Just as dangerous. Those accounts also fall outside normal policy of password changes so they have to be very secure in their makeup. I can think of a dozen systems that need domain admin access, they just don't work without it.