Thanks, didn't catch your point earlier.

I guess SU is just to convienent for me. I preffer to have everything take place when the user is logging on rather than at a later time. I don't really trust my users to leave their computers on after normal work hours (plus their instructed not to) and most computers sre still in use after work hours anyways. I can just image a user rebooting their computer because it's to slow or for some other unknown reason. I like the idea of them having to sit and wait while they watch their computers software being updated.

Thanks for the offer of discussing alternatives but I'm already fairly comfortable with using remote execution and job tasks.

I was just looking for a way to make what I'm already doing more secure.

Thanks