Im trying to figure out if it's possible to create some policy that
enables remote management of the PC's that will ask for user
permission if it is to be managed by user XXX or a user from group
"support" or something like that.

But,, I'd also like the possibilty to have a "super-admin" or
something that can manage any PC without the above user permission.
This to be used during installations, upgrades,etc that might take
place during the weekends or so...

Sure,, the way around it ( that works today ) is to when needed simply
change the policy to NOT require user permission,, but,, it would be
"nicer" if it could be devided on a permanent basis.