I've got everything working if the user account is in the domain's "Administrators" group, but I can't figure out how to allow a "regular" domain user to have this ability. On a standalone box, I'm ...