What about using PSExec fm Sysinternals ? Not a lot of fuss and muss and easily incorporated into any script. However, if you have >10K users in 200 sites all running 56K frame, what is the difference if they pull it across the wire or you pushing it? If you don't have a local distro source it's going to take a while anyway. And this way you're not creating any overly complicated group structures.
If you have a rollout for anything affecting such a large number of users I would be manipulating their groups, or create a new one for the rollout, and handle the distro w/a CD or DVD and a specific script for the effort.
For onesie/twosie installs the more secure method would be to push it out as needed. But then again I don't have enough info to tell what you're trying to get installed and on what kind of scale or your distribution method. Large projects are a lot different than individual, daily support.
_________________________
~Glenn
==============================
Deadlines take their toll.
Please have exact change.
