Did you know you can automatically refresh NAL using a command line? Under your ConsoleOne\lib\zen directory is an AutoRun.exe whose sole purpose is to refresh NAL. Copy this out to your public drive as RefreshNAL.EXE (for instance). You can now call this executable in any of your scripts where you want/need to refresh NAL.
You could use this tool and push out a Windows Scheduler setting to automatically run it on a recurring basis. Once and for all solving the lack of auto updating from ZENworks.
In an environment where security is a must, you could continuously push security settings to slow people down that may try to compromise those security settings (proxies, VPNs, etc.).