To get around this you have to modify the "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" Security Policy under Local Policies, Local Security Settings and set the value to "No Prompt". Hopefully Microsoft will come up with a more targetted way of doing this in future (or fix the edge cases where the required approval prompt goes AWOL).