Is there a way to install PCAnywhere on a machine, alowwing the user the ability to remote control machines without giving them access to the DS?
Do you mean without giving them access to the NS? If you provide pcAnywhere to a user, you must import them as a user account in the NS and assign them to a security role which contains the proper privileges to use pcAnywhere. They do not need to access the console, however.
See this KB for direct access to pcAnywhere without using the SMC: http://www.symantec.com/docs/HOWTO10942
And here for creating a custom security role that only has access to pcAnywhere: http://www.symantec.com/docs/HOWTO31121 or http://www.symantec.com/docs/HOWTO21597
Does this help?
You may also want to think about changing the behavior of your Standard & Super User account roles for pcAnywhere.
This optional patch will adjust the behavior of the host based upon the role of the user.
http://www.symantec.com/docs/TECH138171