Using Groups is the best way to divide the users and their resources. Use a single common "HEADER" file that sets global variables and exports common settings to DOS (for Win95 / 98). Then use the SELECT command ( a CASE statement)to find the group and call another group specific script. In this way you control the scripts without a long and messy IF.. ELSE .. ENDIF. The main logon script - my HEADER - is very short and the Group scripts are specific so making changes to one script does not cause problems elsewhere - except if you are passing Global Variables and decide to change them (which you should't do) in one of the sub scripts.
All scripts are kept in \servername\netlogon and Kix is on the workstation. Use NT replication to send you scripts to all BDC's. Means you have to use Change Control to keep track of changes so you can fix any errors that appear before you do another replicate. Don't forget to put all the scripts, Kix, Win95 Policy files and anything else to be replicated in the EXPORT\SCRIPTS directory of the PDC. It will copy to the IMPORT\SCRIPTS directory of the PDC and then to the IMPORT\SCRIPTS of all BDC's - IMPORT\SCRIPTS is shared as \\server\netlogon.
