I'd send my pennies on doing this with runnas, and then 'encrypt' the scriptfile into a kx, if you still need to do this with a script.

check the InGroup in the kix ref-guide.

Second, even if you alter the security settings for that map, you still wanna kick off the adding of the dll, right?
_________________________
as long as it works - why fix it?
If it doesn't work - kix-it!