For a deployment that is more secure, the Dynamics 365 VSS Writer Service should be run under a least-privileged domain user ...