I haven't read this thread completely, but if you've got an AD-domain, you really should use group policies for this instead. Why? It does all the necessary work, and it's easier when you want to do another update.
_________________________
The tart is out there