SQL uses a proxy account when you run a job or xp_cmdshell with a user who aren't a sysadmin. This proxy account doesn't have to be a part of the administrators group.

Look in BOL for 'xp_sqlagent_proxy_account'