allow non-admin services on windows