I run my logon script based on sub-scripts driven by domain/OU membership.
See http://home.comcast.net/~habullock/logon_script_architecture.htm for some ideas. The (How-The-OU-Stuff-Works) link may be what you want.
We have all the UDFs you need on this site to accomplish your goal.
