I'm in somewhat the same situation as you. When browsing one domain, I find over 350 visible objects. However, not all machines are visible nor on this domain. Ideally, I should be able to do exactly the same things for NT as I do for Windows 95 through the logon script... however at this point I can't.

The logon script by design is as static as possible. Rather than make incremental changes to the logon script, I prefer to rewrite the script, making multiple optimizations. If I create a test logon script with all of my optimizations included and working, it is much easier to gain approval from management for these changes.

Management looks for these things:

1. Does it look the same to the end user?
2. Can we patch the old script to do the same things?
3. Is there another way of doing it that disturbs the end user less?
4. Has it been tested properly?
5. Does it require changes to the DCs and other supplementary systems?
6. Does it require additional maintenance?
7. Is the script long, hard to understand, and difficult to maintain or recreate?
8. Does it increase network bandwidth peak usage?

.....
Many of these types of questions are very difficult to get around. Because software and hardware platforms are constantly changing, the answer is more often than not -- "wait to implement it until we know more about what we're going to be doing in a few months" or "we don't understand it so it's too complex"...

....

What I would like to do is present a logon script that :

1. copies kixtart to client machines, even though the user may not have local admin rights.
2. Maps drives based on what group a user is in.
3. Installs/maintains/updates the latest version of VirusScan (with or without local admin rights)
4. Does not add a bunch of files to the users' PCs
5. Runs quickly on slow connections.
6. Installs security updates and hotfixes when necessary (to Win95/NT/2000 -- with or without local admin rights).
7. Is not so long that you can't read through it in half an hour.
...........

So, at present, I'm working on it.. trying to figure out the best solution.

Brian