So security is not an issue for your boss. Then you might as well make everyone admin.
If it has to be done in the logon script you are stuck with something like runas which is a huge security risk
Actually that idea isn't as bad as you think. Everyone could be made LOCAL admins. That way there is no real security issue and this can be done trough GPO. Also this poses not treat to network security.
