No problem Les,

I'm sure everyone has their own ideas and methods. Symantec has pushed out too many bad defs that can/could hang or otherwise disable your desktops, so we always test their def files on a couple systems first before deploying.

So I manually launch the definition update from the console for one server in our Domain, which then automatically updates all the other servers which in turn updates all the clients.

That way it is fully automated except for the fact that we test first. If you trust Symantec you can simply have one server automatically update the def files every day through their LiveUpdate program and then have all of your other systems checking and updating from your one main server. It works, we just don't trust Symantec to get it right the first time every time. Most of the time they do, but that would be a real drag to have 1,000s of desktop dead to the point that it required "MANUAL" intervention to repair.