The only thing I have not tried is using the -u and -p in the psexec.exe command line to specify which user/pass to authenticate with. I've been trying to psexce scanstate on the remote machine like 20 different ways through the task sequence and it seems that no matter how I configure it I get access denied on the source PC.