Willo, I pushed out the ePOAgent through my login script as well. You're best bet in dealing with admin privilage is to create a service account with domain admin privilage. Then you custom build your installer to install using the service account if the local user doesn't have the rights to do it themselves.