I was trying to replace local server administrator to less powerful account in the Sceduled Task definition. But it took some time to set the right properly. Please refer to the following article:
to sum up: you can use local account to run as for the task. This account should not be local administrators. Give apropriate rights to the data folders and read/execute to binary folder. Using Local security setting (admin tool) add logon locally and as as a batch. If your script is cmd, add permission to cmd.exe to be exceuted for this account.