Thanks for the post. I read about Incontainer UDF. Can I use the following statement:

if not incontainer("OU=Research,DC=cs,DC=utexas,DC=edu", "Computer")
\\server\share\FramePkg.exe /install=agent /forceinstall

endf

What I want to accomplish is to prevent the installation of epo agent on any computers in RESERACH OU including and sub OU's under reserach.

Domain: cd.utexas.edu(cs is the child domain under utexas)
RESERACH: OU with sub OU's containg research computers.

Full Script:

If exist c:\document and settings\all users\application data\network associates\common framework\lastpropsSentToserver.xml

Goto End_script

end if

if not incontainer("OU=Research,DC=cs,DC=utexas,DC=edu", "Computer")

\\server\share\FramePkg.exe /install=agent /forceinstall

end if

:End_Script