osqueryi does not try to open the same database. The permission issue you describe sounds very likely. I don't know where logs go for windows services.