my problem with following your suggestion is, security 101... never let normal users into local administrators group... unless you want to create a backup-user and do a run as?
