If you go to the admin console of the IVE there is an "installers" tab under one of the system menus. This has canned MSI and EXE installers for all the products. To save yourself some effort install the "Juniper Installer Service" as an admin on your PCs; when ever they connect to the IVE it will automatically install and upgrade the client components (such as network connect) on demand. Once it's on, it should be set and forget and whenever you upgrade the IVE it will should automatically upgrade the clients the next time they connect. This is also useful if you change your mind about client options to give your end users. It's all documented at www.juniper.net/techpubs, you want the client-side changes guide and the main admin guide, both go into a lot of detail.