What a great little system AutoIT is

Already used it once this year to make some retro software network-printer friendly by scripting a local port with encrypted RunAs credentials and just been dug out of a hole by it again...

The joy that is Sage Accounts decided that it didn't like the install on one of the master images and would only run as a local admin, Sage suggested uninstalling and also removing .NET, which really didn't appeal on a large bunch of machines so, one local admin account (via restricted groups) wrapped up as an EXE later I'm saved