As of version 10.2, changing the Windows user that Splunk Enterprise on Windows runs as is no longer possible. Splunk implemented a change to the Splunk Enterprise for Windows installation process to improve security and reduce complexity overall when installing and using Splunk Enterprise on Windows. See Choose the Windows user Splunk Enterprise should run as or Deprecated and removed in the Splunk Enterprise version 10.2 Release Notes.