Remote Desktop from Lab-Admin(2) has access to all lab machines

On the four remaining holdouts (Ch, Ck, Wd, and BWd) from Remote Desktop, I went to each machine, logged in as admin or nsvadmin, chose Sharing, Apple Remote Desktop, then Access Permissions.  I enabled at least some account (usually nsvadmin) for ARD and enabled all the ARD things (report, control, observe, etc.)  I then entered the matching login/password info in Remote Desktop on Lab-Admin(2).  That, plus a reboot, got all machines controllable from Lab-Admin(2).

I also updated the ARD client software on those machines, plus a few more throughout the network that happened to be available.