|
There's no simple way around it. Normal users are locked out of those keys for a reason.
I know some of the other users on here have created systems that use scheduled tasks and what not to run administrative tasks such as registry entries and software installs on an as needed basis. I myself used the easier (lazier) route in the past. I used sanur.exe to pipe the admin user/pw to the install script and just tokenized the calling scripts to make it harder for prying eyes. But even this is not considered secure, and I'm not sure I would do it that way today.
I have not interacted with active directory in many years, but aren't there GPOs that can be set for stuff like this so that it doesn't have to be done via login script?
| 
