Two items to add...
First, Symantec's technical support pages are some of the worst around. Every search yields axactly the same results with only the first one or two being close to on point and the forums are insanely difficult to find unless you stumble into one from an unrelated search result.
Second, NAVCE has remarkably good client push features. We generally use the client push features from the Symantec System Center. You have to install the client-pushing features from the CD though, they aren't automatic. You can also make executable packages that can be launched via a login script, etc. The important configuration part is the grc.dat file. It keeps the settings that the client will eventually end up with, and is configured mainly from the client options and admin only options sections of the System Center. We push the client and updates to several hundred computers (in three states via LAN and WAN)periodically without incident in a non-domained Win2000 environment (it also works on NT 4). In either case the server service must be running on the workstation to receive the client via push. I don't THINK that it can be pushed to Win98 systems (we haven't had a need to, so I haven't researched it.) It has worked for us in versions 7.5, 7.6 and 8.0.
You could also set up the web-based install, which installs the client with your settings from a location within your organization, but that would require the end-user to follow through, so it might not be an option. It is also tedious to configure and they changed the layout just enough between version 7.6 and 8.0 to make you have to figure it our all over again.
