I handle this by giving the Authenticated Users group full access to the C:\program Files\Cisco\Call Manager Attendant Console folder. The logged in user just needs to be able to read and write to this folder.
Hope this helps. If so, please rate the post.
Brandon