I have installed Services for UNIX and use ssh for remote control. Between Windows machines psexec is the right tool for passing commands. But between OS X and Windows I recommend Services for UNIX.
So, you want to be able to tunnel in... Why can't you do this already? If you use Shared Networking, you forward the port (manually now and through an interface once the new Beta is stable), and if you use Briged Networking, things show up as normal, right?
I want to be able to pass a command to cmd.exe to say, change a users password, etc. This has to be done in Shared Networking mode in my environment. I could use a client like Altiris then use port forwarding to pass commands that way, but I'm just asking if anyone has any other methods of doing this.