Your problem is not unlike the age old chicken and egg argument. Which came first? If you are not in control of your environment, you cannot know whether the NT script or NetWare script comes first or if the other will even follow. So then how can you determine what you're logged in/on to from within either script?

The only way to know for sure (maybe) is if you stuff another script into the RunOnce key in the registry. That script will only run after the other scripts have completed, the 'maybe' caveat being the RunLogonScriptSync setting.

You don't say how they get the anti-virus program or what it is. Is it something that gets installed or is it just run from the network? If it gets installed, then just test to see if it has been installed. With today's viruses you would be remiss to not have realtime virus protection installed. I would discourage scans during login/logon. They encourage users to stay logged in/on as long as possible.

_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.