Trouble running ssh-host-config

[Steve Kelem]

When I right-click cygwin.bat and run as Administrator, ssh-host-config -y
gets the following errors:

% ssh-host-config -y

*** Warning: Running this script typically requires administrator
privileges!
*** Warning: However, it seems your account does not have these privileges.
*** Warning: Here's the list of groups in your user token:

    None
    Users
    INTERACTIVE
    CONSOLE LOGON
    Authenticated Users
    This Organization
    Local account
    LOCAL
    NTLM Authentication
    Medium Mandatory Level

*** Warning: This usually means you're running this script from a non-admin
*** Warning: desktop session, or in a non-elevated shell under UAC control.

*** Warning: Make sure you have the appropriate privileges right now,
*** Warning: otherwise parts of this script will probably fail!

*** Query: Are you sure you want to continue?  (Say "no" if you're not sure
*** Query: you have the required privileges) (yes/no) yes

*** Warning: Can't set permissions on /var/empty!
*** Info: Generating missing SSH host keys
*** Warning: Can't create /etc/ssh/ssh_config because default version could
not be found.
*** Warning: Check '/etc/ssh/defaults'
*** Warning: Can't create /etc/ssh/sshd_config because default version
could not be found.
*** Warning: Check '/etc/ssh/defaults'
*** Info: Updating /etc/ssh/sshd_config file

*** Query: Do you want to install sshd as a service?
*** Query: (Say "no" if it is already installed as a service) (yes/no) yes
*** Query: Enter the value of CYGWIN for the daemon: []
*** Info: On Windows Server 2003, Windows Vista, and above, the
*** Info: SYSTEM account cannot setuid to other users -- a capability
*** Info: sshd requires.  You need to have or to create a privileged
*** Info: account.  This script will help you do so.

*** Info: It's not possible to use the LocalSystem account for services
*** Info: that can change the user id without an explicit password
*** Info: (such as passwordless logins [e.g. public key authentication]
*** Info: via sshd) when having to create the user token from scratch.
*** Info: For more information on this requirement, see
*** Info: https://cygwin.com/cygwin-ug-net/ntsec.html#ntsec-nopasswd1

*** Info: If you want to enable that functionality, it's required to create
*** Info: a new account with special privileges (unless such an account
*** Info: already exists). This account is then used to run these special
*** Info: servers.

*** Info: Note that creating a new user requires that the current account
*** Info: have Administrator privileges itself.

*** Info: The following privileged accounts were found: 'cyg_server' .

*** Info: This script plans to use 'cyg_server'.
*** Info: 'cyg_server' will only be used by registered services.
*** Query: Please enter the password for user 'cyg_server':
*** Query: Reenter:

/usr/bin/cygrunsrv: Error installing a service: OpenSCManager:  Win32 error
5:
Access is denied.

*** ERROR: Installing sshd as a service failed!

*** Warning: Host configuration exited with 4 errors or warnings!
*** Warning: Make sure that all problems reported are fixed,
*** Warning: then re-run ssh-host-config.

What am I doing wrong?
Thanks for any help you can give.
Steve

Cygwin 2.10.0-1
Windows 10 x64
Openssh 7.6p1-1
cyg_server exists as an account with admin privileges, as does my account.
Windows accounts as workgroup, not domain.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple