All machines in office A are OSX, in office B they are split OSX/Windoze, but at both sites the server is OSX.
I have a partial answer from using Tunnel Manager. It has a 'allow remote connections to local ports' tick box and using this gains me a partial answer, because now users in A can...