If you open a big ol' security hole, you'll pay the karmic price. You're describing the equivalent of a SQL-injection attack. Security 101. The typical way of launching a config tool is via an .exe that knows how to find the installed tool (e.g., path in registry).