Jens I still think that using JT is the way to go, and I am going to introduce into our domain a KiX Management System like yours where the workstation requests an update and then the management server runs JT down to that workstation.

KixRunAs program should give me some time to get my head around using a management server and workstation requests.