Recommended Windows Service Account Settings for Windows BIND?

[Will]

With BIND 9.5 for Windows, what is the recommended settings for the BIND 
account?    I gather they do NOT want you to use the reserved NetworkService 
account to run BIND, but instead want you to:

1) Create a local user "named"
2) Add named to the local Users group
3) Add named to the list of users authorized to start as a service in 
security policy?

In terms of NTFS permissions, where does the local named account need write 
access?

-- 
Will