Fair enough. Then share code for a win64 service that shares memory with a user space app and does not need any raised permissions? Because that is what you are implying.
If you can, I stand corrected, but you likely can't.
And if you can't most others can't either....I will give you that..
Ah, I see, if the service defines that the user group can access defined shared memory, then the user can access that memory without elevation. (But the service needs to adapt SID and DACL for that so the memory doesn't have SYSTEM only.)
BUT I would use pipes or sockets instead.
So it is possible, but you may introduce a security violation.
Although I found a C++ example, I won't use such code.
That said: according to MS it does not violate its best practice.