See what each machine is, what is installed on it, and run a command on it - even when the user is on a VPN to a customer.
EMS is limited to the IT administrators listed on the server.