If you are installing agents only on the local computer, you must have Administrator permissions on that computer. You can log on either with a domain administrator account or as a local administrator.
When you install or update agents on remote computers, the Windows agent service account on the Deployment Agent computer must have Administrator permissions for the target computers. The agent service account can either be a member of the Domain Admins group or you can add the account to the Administrators local group of the target computer. You also need remote access to the file system (for example, through the admin share) and remote access to the registry through the Remote Registry Service. For more information about the Deployment Agent, see Installing or Updating Agents on Remote Computers.
To run the Windows agent service, the Log On As service account you specify during installation or update must have the “Log on as a service” permission on the agent computer. If you change the service account to a local account from a domain one, or vice versa, after the installation or update, the Windows agent service might not restart on systems where the new account does not have the required permission by default.