"You were on the right track though... found a Gallery system posting elsewhere that said in order for the exec function to work, you need to give read and exec to the cmd.exe located in the system32 directory."
Isn't this a *huge* security issue, though? Giving them access to running commands?