I thought I would add another tidbit. We added the following bit of code to keep PCs and laptops from loging on to our network if they weren't properly protected by the latest McAfee updates.;=========================================================================
;
; Make sure McAfee Virus Scan Software is installed before continuing
;
;
$RetCode = CompareFileTimes("C:\Program Files\Common Files\Network Associates\VirusScan Engine\4.0.xx\names.dat", "\\Barney\Apps\McAfee\Update\LastVersion\names.dat")
IF $RetCode = -1 OR $RetCode = -2 OR $RetCode = -3
LogEvent( 2, 1, @USERID + " has obsolete or missing virus software!", "\\Barney" )
MessageBox( "Your virus scanning software is out of date or has not been properly installed. You will not be allowed to log on to the network until you contact System Support for assistance. YOUR NETWORK DRIVES WERE NOT MAPPED!", "WARNING", 0)
GOTO Done
ENDIF
\\Barney is the name of our NT server and basically this bit of code compares the local DAT files against the lates on our server. If they don't match, we make an entry on the server's event log file and display a message on the user's machine and exit without mapping any drives. This adds one additional little safeguard against spreading a virus through our network.
When we receive a new DAT file update from McAfee, we move the current one (the one everyone should be using) to the LastVersion directory. Since DAT files are updated from MacAfee every week, this gives every user at least two weeks to get properly updated. Along with this we have automated the update and upgrade process, so if the user is connected, he will get updated.
It isn't pretty, but it works for us. 
