You must create three domain user accounts for Microsoft Windows SharePoint Services and processes in your environment.

The three user accounts needed are as follows:

• SharePoint Service Account: FABRIKAM\SharePoint_AppID
  This account is the Windows SharePoint Services version 3.0 service account and is used to access your Windows SharePoint Services configuration database. It also acts as the application pool identity for the SharePoint Central Administration application pool, and it is the account under which the Windows SharePoint Services Timer service runs. The SharePoint Products and Technologies Configuration Wizard adds this account to the Microsoft SQL Server Logins, the SQL Server Database Creator server role, and the SQL Server Security Administrators server role. The user account that you specify as the Windows SharePoint Services version 3.0 service account must be a domain user account, but it does not need to be a member of any specific security group on your front-end servers or your back-end database servers. It is recommended that you follow the principle of least privilege and specify a user account that is not a member of the Administrators group on your front-end servers or your back-end servers.
  
• Search Service Account: FABRIKAM\SharePointSrchSvc
  A unique domain user account under which the Windows SharePoint Services Search service can run.
  
• Search Crawler Account: FABRIKAM\SharePointSrchCrl
  

A unique domain user account that is used to crawl content on your sites and create indexes. This user account will be added to the Web application Full Read policy for your farm.

Tasks

Create Service Accounts for Windows SharePoint Services