Couple of things.... Looks like startup/shutdown scripts SHOULD work, for both cases. The only drawback is that they are only run on actual startup/shutdown. A regular login is NOT enough.

Second, I SHOULD be able to use runas, but I don't see a way to enter a password. Using kix, I could tokenize the script, so entering a password wouldn't be a real issue. I just REALLY don't want to have to give out an admin password. I guess I could create an account that has local admin rights only and make the password something really easy to type in, but I shouldn't HAVE to. There HAS to be a way to fully automate it.