Here is the short product spec

1. Fix the service stuff
2. Use the event log
3. Do real authentication (LogonUser[Ex]+CreateProcessAsUser maybe?)
4. Properly Set the environment