The osquery MSI places osqueryd.exe in its own directory and sets different permissions https://github.com/osquery/osquery/blob/e6fe15eb49660725e65dba1549932ed96e0a8c6e/tools/provision/chocolatey/osquery_utils.ps1#L66