Windows Server 2003 Settings on SAP

There are several settings that are installed by default by SAP Netweaver and granted to <sapsid>adm. Can someone advise why does this account need the below settings to work/function:

- Access this computer from network

- Act as part of the operating system

- Replace a process-level token

I will like to remove the <sapsid>adm away from these settings as there may be security vulnerabilities when these settings are given. Is it possible to remove it and SAP can work as per normal?