It might be simpler to give the user group of the build user write access and all other user groups read-only access once up front. If that won't work, this appears to be possible via WMI (from a Run Script action) or using some tools Resource Kit tools (from a Run Program action):
http://www.google.com/search?hl=en&l...ns&btnG=Search