Install the windows service as "NT AUTHORITY\NetworkService"

Untested

Maybe
Fixes #686

dnscrypt-proxy/main.go

@@ -35,6 +35,9 @@ func main() {
 		Description:      "Encrypted/authenticated DNS proxy",
 		WorkingDirectory: pwd,
 	}
+	if serviceUserName := serviceStartupUserName(); serviceUserName != nil {
+		svcConfig.UserName = *serviceUserName
+	}
 	svcFlag := flag.String("service", "", fmt.Sprintf("Control the system service: %q", service.ControlAction))
 	app := &App{}
 	svc, err := service.New(app, svcConfig)

dnscrypt-proxy/privilege_linux.go

@@ -12,6 +12,10 @@ import (
 	"github.com/jedisct1/dlog"
 )
 
+func serviceStartupUserName() *string {
+	return nil
+}
+
 func (proxy *Proxy) dropPrivilege(userStr string, fds []*os.File) {
 	currentUser, err := user.Current()
 	if err != nil && currentUser.Uid != "0" {

dnscrypt-proxy/privilege_others.go

@@ -14,6 +14,10 @@ import (
 	"github.com/jedisct1/dlog"
 )
 
+func serviceStartupUserName() *string {
+	return nil
+}
+
 func (proxy *Proxy) dropPrivilege(userStr string, fds []*os.File) {
 	currentUser, err := user.Current()
 	if err != nil && currentUser.Uid != "0" {

dnscrypt-proxy/privilege_windows.go

@@ -2,4 +2,9 @@ package main
 
 import "os"
 
+func serviceStartupUserName() *string {
+	userName := "NT AUTHORITY\\NetworkService"
+	return &userName
+}
+
 func (proxy *Proxy) dropPrivilege(userStr string, fds []*os.File) {}