I've been considering a hybrid startup script/logon script. I don't know why, but I've always been tentative to use startup scripts. So startup scripts do not prompt the UAC when running a silent installer?