So currently our senior VP in IT has a single log on script that is run via ADUC and does things like install 3rd party updates, maps networked drives, inventories computers, copies files to desktop, among other things.
I'm looking for some solid reasons/examples of why these things would be better off done in group policy. Along with anything else you can and should do in group policy that I haven't thought of.
Some of my reasoning was that you could split up tasks. 3rd party updates could be done on log off so that users aren't waiting for these to finish when logging in. As well as pushing new installs. As well as adding the logon script to Group Policy instead of running it from ADUC would mean you don't have to make sure it's on each user profile and it would be applied to everyone.