OK, that is a very good point. Let me go back a stage further and ask how you would do the following:

The reason for wanting to be able to remotely install programs that require admin privileges is that I have to rollout an Antivirus application to all our dekstop pc's. I thought, rightly or wrongly, that the best way to do this would be via the login script as I wanted to catch all machines when they logon.

Then I came up against the problem that our W2k desktop users do not have local admin rights, therefore, I cannot run the AV install through the login script without increasing the rights somewhere. This is where I got the idea of using SU, but if the word is that it is a security risk, then I can't use that solution either?

Can anyone help suggest another way I might achieve what I'm trying to do here?

Sorry if I sound stupid, and I'm not trying to annoy anyone. I'm just after some advice from some more experienced admins.

Kind Regards, Greg.