There is a way to have a client initiate running a script on the client under administrative privileges without exposing the password at all. However, it does require some setup as it employs a client-server solution.

Here it goes:
Create a Kixtart script on a server with the following requirements:
  • Runs as a service with a domain administrative account
  • Script purpose is to wait for file change notification in a .INI file that is write accessible
  • If file change notification is received, extract the added .INI file value
  • Perform the predetermined action on the client requesting the action by scheduling a task on the client computer. Taks will run under domain admin privs as it is being scheduled by a domain admin
Client setup:
  • Login script component that requests predetermined action by writing into a .INI file
KSMS (see http://www.kixtart.org/board/ultimatebb.php?ubb=get_topic;f=2;t=003656 ) uses a similar approach to install software, however, the server script only runs once a night and goes throguh a .INI file to see which cleint requested what program install.
_________________________
There are two types of vessels, submarines and targets.