Hi Neil,
I hope all is well with you! Actually I push out VBS' all the time for a couple clients (thats how they seem to package a lot of things over in the eastern european countries I deal with) The key is having them run the program from the SMS local cache as system account admin (so AV leaves it alone). If they try to run it from the DP, and it has network paths, it seems like it fails.