I need help stopping a logon script, more so, not sure were it is being executed from. I edited (remarked all statements) the login.bat file I have on c:\winnt\sysvol\sysvol\domain\scripts, and the scripts still executes. I also checked the Group Policy Windows Settings Scripts (Logon/Logoff) and there are no files there. The problem I am having is that, map drives are still executed. I also have my antivirus (Trend Micro) install via this mystery script.
Where else can I check to see where the script is being executed from?