While trying to move an NT Service over to its own account I hit the following WCF error:-

Exception Alert : System.ServiceModel.AddressAccessDeniedException: HTTP could not register URL http://+:8082/home/. Your process does not have access rights to this namespace (see http://go.microsoft.com/fwlink/?LinkId=70353 for details). —> System.Net.HttpListenerException: Access is denied at System.Net.HttpListener.AddAllPrefixes() at System.Net.HttpListener.Start() at System.ServiceModel.Channels.SharedHttpTransportManager.OnOpen()

The referenced article wasn’t much help but a quick web search led to this article on MSDN which has a better explanation and two ways to solve the problem.  Unfortunately neither is ‘simple’.  In the end I used the source code, built a new .EXE and added it to my setup code.
Seems odd that the SYSTEM account could do this just fine but the safer account I created to run the service cannot.  Why isn’t there a security group for this that I can just add my user to and be done?