Well, I can push them out via Active Directory Group Policy... otherwise, I have to use mmc on each workstation that isn't part of the domain and import the cert. But, no biggie. I've already done most of them.

BTW: I just used the CA services on the windows 2003 to create my cert.