What are the default accounts used for each EventSentry service?

Please note that if you change the service account used for the Collector, you will not be able to re-use the existing certificate, as a new one must be created when the Collector starts under a different account This will require a manual configuration update (Push Configuration) for your agents, as they will otherwise refuse to connect to the Collector when the certificate has changed.

If you use the Collector and you change the service account used for the EventSentry (agent) service, you'll need to Reset Shared Secrets in order for the agent to successfully connect to the Collector under the new service account.