Port Namespacing access
According to this you need to run as local admin. The reason for this appears to be that unless you specifically indicate what namespaces you need access to, your application account needs to run as local admin (which allows it to hit any port it wants to.)
So I know 2 ports that need to be namespaced to run without local admin: (localhost:52580/CoveoDiagnosticTool and localhost:80/AdminService)
netsh http add urlacl url=http://+:52580/CoveoDiagnosticTool user=DOMAIN\app_coveo listen=yes delegate=yes
netsh http add urlacl url=http://+:80/AdminService user=DOMAIN\app_coveo listen=yes delegate=yes
Does anyone know if there are other namespaces that Coveo requires access to? I know that during setup it mentions port 8081 (which we changed to 8082 for some reason). Anyone know what it does with that port?