'twas I who needed a solution. The problem with cfengine (and possibly puppet?) is that I cannot install any software on the target servers and have to keep my on-system footprint to an absolute minimum. I do, however, have one server of my own (so to speak) in the network that I can use for non-invasive monitoring, which can include running commands remotely via SSH. -Adam