Thanks very much Allen. The reghack did the trick as a fast confirmation that this is indeed the problem. I'll take a closer look at RunAsInteractiveUser() as a longer term solution.

Sorry if this was a FAQ, I did try some searching of the board before posting but I didn't find quite the right incantation I guess. Thanks and best wishes!