Patrick,
To make your solution a little more secure, change your TST_SU.KIX to:
code:
;;;;;TST_SU.KIX;;;;;
SetL "SU_PASSWORD="+$SU_PASSWORD
Shell 'su admin "%SU_COMMANDLINE%"'
Exit 0
And change the encryption line to:
code:
wkixcrypt -f "D:\Kix\tst\WKIX32.EXE" -f "D:\Kix\tst\SU.EXE" -m "" -e """"%KIXCRYPTDIR%\wkix32.exe """%KIXCRYPTFILE%""" $SU_PASSWORD=******" "D:\Kix\tst\tst_su.kix"
(Sorry about the long line guys)

Doing it this way ensures that the password is never visible in it's unencrypted form - it is passed directly on the command line as a variable assignment.

Even if someone gets a view of your unencrypted script, they will not see the password.