Just green-lighting here.

Was thinking if you pushed this little vbs scriptlet to the target wkstn (to the root of c:\) ...

code:
dim ans

ans = InputBox("Hello")
This scriptlet could be changed to accept input parms to specify things like title and prompt, then ran this script from your machine:

code:
Break On
 
$WKSTN = "tassie-xp"
 
$Process = GetObject("winmgmts:{impersonationLevel=impersonate}!" +
		"\\$WKSTN\root\cimv2:Win32_Process" )
 
$Process.Create("wscript.exe c:\ibox.vbs")
 
exit 1
Then maybe (like was just mentioned) use the registry or INI file to pipe back the reponse ...