Current tree looks like this:
Root = LAW
o=asb
ou=sf
ou=ore
ou=slc

SF container has a login script on it that will update the client:
If OS_VERSION="V5.01" then
@\\fs4\sys\public\client\491sp5\acu.exe
End

However, sometimes a user from the SF Container will travel to the ORE office.. when this happens, it updates their novell client over the WAN (incorrect settings/versions, etc, etc)

How can I prevent that from happening? If an SF user logs into different office, I don't want the client to update