Vista Service Application Data

[Jimmie]

This problem has been bugging me for a while now, and its time to make
a decision. Any help will be appreciated.

I wrote a Windows Service, let's assume the user installs it in the
default installation directory. Not only is the service installed
there, but also a user interface configuration tool. I don't need
multiple user configurations for this particular service. Basically,
one computer, one configuration.

So where should all my Application Data go? Clearly the "All Users
\Application Data" (or whatever CSIDL_COMMON_APPDATA returns) profile
directory is the correct area to read and write from, but how will my
users access this directory? Should elevated privileges be requested
every time the UI is executed?

I like the way Vista has implemented the new administration token
system, but I'm finding little documentation for it with regards to
writing a service.