Additionally, it checks to see if the most recent Norton AV is on the user's workstation by:

IF NOT EXIST C:\TEMP\0822i32.exe COPY \\%LOGONSERVER%\NETLOGON\0822i32.exe C:\TEMP\0822i32.exe,
and then calls the Virus Update file to run.

Problem is, my remote users don't want to wait for the few minutes it takes to download the file, so they CTRL-ALT-DEL and "End Process" on my login script.

Is there a way to defeat this?

I've played with changing the login script to start the Scheduler account under local admin privileges, then using "soon" (rather than "at") to schedule the download, but I can still break out of that from Task Manager.

Any ideas?

Steve.