I use a different approach with NAV. The logon script is still used to see if NAV is installed and if not will force it but that's all I do from logon. NAV takes care of pattern updates (most of the time).

I run an admin script that browses the network periodically looking for NAV version and pattern version.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.