Why even mess with SU or Task Scheduler? Why not set up a service account with Domain Admin rights and setup the agent to use these credentials when installing? We're doing this is our org and do not have rights issues installing the agent.