How do you give a Windows service specific permissions

Windows service always runs under someone’s identity. Can be System or
Administrator account, but if you want to restrict the behavior of a
Windows service, the best bet is to create a new user account, assign
and deny necessary privileges to that account, and then associate the
Windows service with that new account.