doug,
that seems to have fixed it. the contexts in that settings panel had all been set to Elevated Token, without Interactive. i changed them all to SYSTEM, leaving Interactive un-set.
not sure how this setting got changed, but it seems okay now.
thanks!