Hy I had the same problem and I had done a little bit testing.

The tool su (Resource kit)should solve your problem, but the handicap is, that before you can use it , you must first install the service on all machines with administrative rights. If this is done su can do all the work for you.
The way I have tested it was the following:

- Install the SU Service on the worktations
- Then via a login script the su command can run with the domainadminaccount and execute your commands. Type the commands into a batch file
- To ensure that the user can not read the password which is needed for the su command in the batch convert the batch to a .com file using bat2exec.

Now you can run jobs with administrative rights on workstations without the need, that the users have administrative privileges.

Regards Dirk Hatzmann

------------------