How do I delay logon script until after antivirus has loaded and started?

[jcritch]

How do I delay logon script until after antivirus has loaded and started?

Using Symantec Endpoint Manager - SEP (antivirus, client firewall, etc.), legacy logon script is executing before the SEP has completed loading and will allow network traffic to flow.

So, what methods are available to delay processing of a legacy or other type (wsh, vbscript, etc.) login script, so drive letters may be maped after the SEP loads?

[jeremym]

You cannot delay GP processing in this way. It is "fixed" timing and will execute these items before the desktop is hot. You -may- want to consider executing a scheduled task or "task based upon an event in the event log" ..

So, when "Event X is seen in the event log" then "do something."

This will likely help you fire off what you need to -after- the desktop is hot.

[jcritch]

So, how do organizations typically map thier drive letters at logon when using Group Policy? Because when I use NET USE in a Group Policy Logon Script, the commands execute before the Symantec Endpoint Protection software and Windows XP allow access to the network. So, the drive mappings using NET USE fail.

We prefer to not do individual drive mappings that are persistent on each machine. We prefer to accomplish this in logon script or some similar method, so as the drive letters / mappings change, the process can be automated in the logon script.

Active Directory / Group Policy / Windows Server are new to us.

[Jammsher]

You could throw up a hidden message box that causes the system to wait for input and time it to default-cancel. You set the timing so that there is a long enough period for your machines to wake up.