Brandon,
Yes, you can't write to protected Windows areas (e.g. the "Program Files" folder tree, the Windows folder tree, the HKEY_LOCAL_MACHINE registry branch, etc.) from a non-elevated running "asInvoker" manifested application. In other words, you can only do "per-user" operations from your install, not any "per-machine" task. You can't register OCX files, you can't write to the standard "Program Files" folder or the Windows folder, you can't add machine-wide uninstall entries, etc. You need a standard "requireAdministrator" manifested setup to handle this.
Friedrich