Can you explain your model, please correct me if I'm wrong, as far as I can understand now in your case users that are allowed to execute queries using "distributed queries" on machines that they normally does now have access to?