What credentials does the change auditor agent run under after it is deployed?

I want to disable the domain user account originally used to deploy agents.