> How else would that work?

Windows way is to have a privileged service which the non-privileged user application talks to over sockets or similar.