Right now, we're just doing a proof of concept. So rolled it out manually to about 12 desktops.
But you can easily make it part of a "SMS" push as a typical remote install.
Also, it bundles well with an existing SAPGUI package. But yes, a "usual push of software via windows update package" will work.
Crazy thing....it just started working....and hasn't broken in a few days. BUt that being said, I'm ready when it does break. You can enable tracing (level 2 and security box) in SM50 for all work processes. AND there is tracing capability in the SPNEGO tcode that is pretty good.
Our problem...was that it would actually work, in terms of getting you past the login screen for CRM UI, and let you reach the point where you could select your biz role (assuming you had more than one assigned), but once you pick you biz role, we would get a pop up to login...hit cancel a few times and you would get to the UI....but on other occasions, it would work perfect. and it's been working perfect for a few days now...
But when it did break, there was no pattern. Could be any user, on any PC, at any time of day.
I opened a message about it, but like I said, by the time SAP responded, it was working. THey want a HTTPwatch trace, but again, it's working, I have nothing to show them.
If I were you, I would close this thread, and then, if you need help, open it in the SSO space:
http://scn.sap.com/community/sso
You'll get a whole of eyes on it that way.
Also, you can "friend" me on SCN and feel free to send direct message. If I can respond I will!
NICK