We have a SharePoint application where we want the user to be able to modify the web.config by activating a feature. The application is extended, so we have an AD based web appl
An alternative would be to write a component which does it. This could be trigged by activating a feature, or updating a webpart.
This would mean you don't need to loosen security, or do it via the command line.