The only requirement for any of the functionality in the WSUSChangeUSS utility is that it be run from a machine with .NET3 and the WSUS API.
Functionally you can run it from any WSUS v3 server or any machine with a WSUS v3 console.
You could also run it from a WSUS v6 system, but this would require you to install the .NET3 which would not otherwise be present.
For the /command export, the utility makes a remote API call to the upstream server and extracts the list of registered downstream servers.
For the /command changeconfig, the utility uses the local API to make a remote API call to each of the downstream servers (based on the list contained in the XML file),
and then pushes the configuration change based on the declared command line parameters (/sourcewsusname, /sourcewsusport, and /sourcewsususessl).
Since everything is defined in the command line parameters, or contained in the XML export file, the actual location of execution of the utility doesn't matter.
