Check the file \\server\cheyupd$\login.bat
This is a sample provided by CA to install the updates. Users must have NTFS rights to read from this share point down in order to run AVupdate.exe, receive signature updates and install the app.

Winnt PC's use a pull system and must be configured for "distribution" as incoming from a remote server who's role typically would also be the Autodownload server. IE> You don't do ANYTHING in your login scripts fro WINNT.