Why do I need psexec to push VNC to remote computers in some situations but not in others?
Take a look at this post for some insight on this. Apparently, there have been some changes in WMI with XP SP2 where remote calls like this operate under the guest account. PSEXEC gets around this by remotely installing the psexec service and running the commands under the context of the administrator account that you supply.