This issues all smell like a 'Service' coming up!!
A Service which runs under admin privilege on the workstation and listens to a specific commandfile in a specific folder.
If a file with that name is placed in that folder, the command in that file are being executed by the service under admin level.

Regards,

Marc

------------------
M.A.C. Duiker (Marc)
Migration Specialist (MCSE)
MarcDuiker@CompuServe.com