All services that are installed as part of the Kofax Search and Matching Server are by default executed with the built-in "Network Service" user account. It may be necessary to run the services with a domain user account so that the access to network shares or a Microsoft SQL Server can be accomplished using the domain user permissions. When you change the service user you have to ensure that the read-write permissions of the database related directories are adjusted accordingly. In a cluster environment the load balancer and the server nodes must run under the same service account.