I also pipe the password to SU, as you can see. The reason why I set the environment variable is that I didn't get SU working until I declared that variable.

As mentioned, this batch work if I run it just as it is, but it doesn't work after i've bat2exec'd + secure'd it... :/

What options for bat2exec, repectively secure do you use?