Could you run your admin scripts on another machine which isn't wide open?
Its probably worse that loads of people have root on the server rather than
the inadequacies in ADSMs admin security 'strategy'.

Regards
Alan