This extension needs administrator privileges for some actions such as create, delete, start, stop, pause and continue. This requirement can cause an elevation of privileges if the service control is available from the web interface or remote control.
The ACL on the service can be set after adding it into SCM to delegate the current administration tasks to a non administrator account or service account.
As of Win32Service 1.1.0, service rights can be managed with PHP. The actual ACLs can be read with win32_read_all_rights_access_service(), an access or deny right can be added with win32_add_right_access_service(), or an access right can be removed with win32_remove_right_access_service().
It is recommended to update to Win32Service 1.1.0. For further instructions to manage rights without the extension (or a version prior to 1.1.0), see the » Microsoft Knowledge Base.