From what we do: Place the cube on the server and use roles for security management. This is the standard practice I think. It allows for easier managament and you do not have to worry about people hitting the wrong cube or an old one. Also size of cube can certainly destroy a client machine