Hi dolphinallen0711,
Adding to Lieven's points: you might be able to use argument-based privilege elevation, if it's just a single setting. It does depend on the timing requirements around that setting, of course; if it must be applied before a user logs on, this approach won't work.
