I was a network admin for years before I started working for myself 9 years ago.
And currently I maintain large networks for my customers here.
From a network admin point of view I think settings the run as to administrators and leaving it set to everyone is the best default.
Why? When I push out programs to multiple computers from the network I want to keep the need to go to each machine to make any changes to a minimum. I make a log in script and have everything automated.
In this case I would want cleanmem mini monitor to run for everyone by default. No need to change any settings.
This way install once and be done. Every user will be set, no need to go to the machines and change the task rule.
Problem is the api I use doesn't have that option to change the run as. But it does allow you to use an xml file with more settings. I have to find out if it will import settings to a current rule or overwrite the rule with defaults.
If the xml will work then the trick would be a small xml with just the admin group settings and nothing else, and have it set to import in. This will of course be only for vista and newer. XP is still very limited.
But if the XML does work this would also give the users more control as they could change the xml, just like you would do

Time to test.
Shane