Protect service Account from accidental Deletion

I want to protect my service account from accidental disable/enable from all users. To accomplish this task I tried to take help of DSACLS, However I am having difficulties to achieve this goal. Below command gives me error as mentioned below . Can someone assist me to resolve my issue

C:\>DSACLS "CN=serv_test,CN=Users,DC=ID,DC=COM" /D "Domain Users:RPWP;userAccountControl;user" /I:T
user is specified as Inherited Object Type. /I:S must be present.
The parameter is incorrect.

The command failed to complete successfully.