Don't requre UAC only for service control

Instead allow everyone-access and ask for admin rights on-demand