I use the following for shiva remote clients

:win95
$win95key = READVALUE("HKEY_LOCAL_MACHINE\SOFTWARE\Shiva Corp.\Shiva VPN Client\", "appLoaded")
IF $win95key = 1
GOTO QUESTION

:win2000
$win2000key = READVALUE("HKEY_LOCAL_MACHINE\SOFTWARE\Shiva Corp.\Shiva VPN Client\", "domaintunnelup")
IF $win2000key = 0
GOTO QUESTION

The only trap is that the uses must log off via the File | exit and log off otherwise if they just "x" out, the registry value stays up and when they log onto the LAN they are seen as remote.

Users seem to like the time we save over the VPN, and know how to log off properly now