You should never elevate the users permission to Administrator, that is what delegation is for. In AD, delegate only those roles that are needed.

You could try using purely a COM solution but if you had a look at how Microsoft does it in VBS you would probably think twice.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.