Well have not played with RuNNas from Shawn in a while but his utility as I recall uses an actual encryption algorithm instead of just obfuscation.

Using a policy would be best if possible, if not then perhaps the task scheduler. My next choice would probably be RuNNas - while testing it a long time ago now, it was a very powerful tool for this type of thing I just rarely have a need for using this type of utility.

The tokenized files from KiXtart according to the author are not using encryption (though spending a few days attempting to crack it resulted in no valid results) so for the most part a tokenized file would seem semi-secure but Ruud does recommend not putting passwords in it.
Using RuNNas along with a Tokenized file would seem a reasonable measure to prevent most from discovering it (though in time who knows, someone could make a cracking tool for it, so again not a good practice) but sometimes real life work has to get done somehow so I would choose the native methods of Windows first before using these other tools.