I am using a custom webservice to manipulate sccm actions (like the maik koster webservice). I advertise a .wsf script to a collection of our helpdesk users, which does the following: gets name of local machine, adds that computer name to a collection that has our task sequences advertised, then refresh machine policies on the local computer… this is assigned at logon (so it runs wherever a helpdesk tech logs in). within a few minutes, they will get the TS advert popup and can refresh the computer if they want, or they can ignore it and go about their business. I then advertise another .wsf to the collection of helpdesk users which removes the local computer from the TS collection, and refreshes local machine policies… this is assigned at logoff, so within a few minutes of the helpdesk tech logging off of the computer, the TS is no longer advertised… so no normal user can accidentily reimage their machine :)

Ping back :-D