Is it best to copy this program to the users computer, copy it to
another
server, or run it from the BM server?

If I copy it to each users computer and then there is an update I have
to
make sure the update get to all the client computers.

If I copy it to another server and there is an update I have to make
sure
I update the other server.

If I run it from the BM server and I need to restart the BM server
everyone have to log out to release the CLNTRUST file.

What has worked best for most people?