Why bother setting up all of these custom CDs when you just need to provide accounts on one server with the appz you want and have the clients tunnel in with ssh? Any standard knoppix cd will do just fine for the clients and you retain complete control.

ssh -XC [email protected]

They can then invoke whatever process they need remotely.