oddjob62 said:Can't you run it under a GPO? Run it under the Computer configuration and it will run as local system (ie will have the rights to add to the local admin group)
testa12 said:If going down this road, you could use Restricted Groups - designed specifically for this purpose