Windows – UAC dialog pops up when starting Google Chrome

Services, just like about every Windows object, have an ACL associated with it, which can be modified to give you access.

As far as I know, there is no official UI for managing service ACLs, so you're left with two options:

1. Download Process Explorer. Start your service (ProcExp only shows running services). In ProcExp, double-click on the process for the Service (or right-click and click Properties). Click the "Services" tab. Typically your program is run by a particular user - Add that user. Hit Advanced. The permissions you can manage include stop/start of this Service and sending custom-defined commands to it.

   Process Hacker is similar, but can manage stopped services as well.

2. sc sdshow, learn the ACE syntax and access rights, edit the security descriptor, pass it back to sc sdset.

This is by design. The checkbox negates the need to right-click and select "Run as administrator" every time.

Windows requires authentication for any task that requires administrator privilages. By what you suggest, nothing would prevent malware searching your computer for "Run as administrator" icons, running them, then using the application to access the depths of your file system. If the program ever displays so much as a file dialog, immediately the malware could modify files in restricted areas of the system.