I think I may have found it. In the service itself, the automatically created ServiceProcessInstaller component has a property “Account” which can be set to “LocalService”, “LocalSystem”, “NetworkService” or “User”. It was defaulting to “User” which must have displayed the prompt.