It's the installation that needs Admin rights. Once installed, it will use a LocalSystem account for the services.
To install this w/ admin rights even if a guest account is logged in, customize the agent install from the ePO console. Right-click on the directory, then select "Customize Agent Package". Here you can "embed" an admin account to be used just for the installation. That account will not be used for any other function.
HTH, AVChap
... my $1 worth of advise, 2cents isn't enough due to inflation