You want to remotely deploy the Symantec Diagnostic Tool (SymDiag).
Symantec Endpoint Protection Manager (SEPM) provides two ways of deploying client install packages to remote systems. These client deployment functions can be repurposed to launch SymDiag remotely.
By wrapping SymDiag in a zip container it is possible to configure SymDiag to launch with the needed command-line parameters.
Note: Running SymDiag in this way will cause it to run under the local System account. This can impact some data collection involving the user account context, including the Threat Analysis Scan.