What you suggested about creating a service account that is an admin of the workstations and a user of the domain is perfect.  Just make sure the service account doesn't have any more rights than it needs on the domain or you could have a security issue.  Also, you will need to ensure that during the installs, no one logs on or your scripts can fail, especially if part of your logon script maps to the servers that you are trying to run (multiple users to the same server from the same client machine does not work).

Thanks for that info.
So can the service account get added at a global level in DS so all scripts and Software deployments use this account or is it when each job is created?
Or does the DS Agent run as this user?

I believe the default setup is to use the System User account of the target computer.  If you want something different than that, you will need to do it on a job by job or task by task basis.