Chris,
ZfD2 is fairly simple compared to ZfD3. You should be able to find all those things in the workstation policies that are set up, and if that is well done they shouldn't be too wide spread across the tree. A workstation policy that has Inventory enabled indicates where it should send its info to - usually an IP address.
You could also look for the presence of the SyBase database server running on a server, that's a relativly simple thing to figure out as well via remote console.
As far as I know that's about the only thing that is really running on the server. Policies and applications are "just" objects in the tree, remote control is just an executable residing in some subdirectory of "public". As of ZfD3 more different components are running on the servers (importing, inventory), and there are more NDS objects (server policies, database objects and so on) as well, but in ZfD2 it's not that complex.
Jim
Jim