Prevent logon scripts in one GPO from executing before those in the parent GPO finish

Typically, you want something like Microsoft Office to be available to every user who uses a computer.

If you're installing a version of Microsoft Office that is "plain old" MSI-based (Office 2003 and 2000) you should be installing software by assigning it the computer, which causes it to install on startup.

If you're installing Office 2007 or Office 2010 you should be using a startup script to install Office. (Thanks, bundles, Microsoft for breaking "plain old" MSI-based installation in Office 2007 and Office 2010... You consistently prove that you don't actually use your own software the way real users / sysadmins do!)

The phrase "The office install will show up in the network install dialog in control panel..." makes it sound like you've "Published" the application to users via Group Policy, rather than "Assigning" it to the computers. You really want assignment to computers for MSI-based Office installs and a startup script for Office 2007 and 2010. You don't want to "Publish" any software that should appear for every user on a client computer.

re: your logon scripts - It sounds like you should make friends with the "Resultant Set of Policy" (Start / Run / RSOP.MSC) and see if the correct GPOs are applying to the client computers and user accounts.

W/o meaning to sound disrespectful, it sounds like you could use some time with a book or whitepaper about how Group Policy works and, in particular, how linking GPOs at different OUs relative to user and computer objects causes Group Policy to be applied. I think you'll find it much less frustrating if you spend some time with that kind of documentation. You can find some good resources at the Windows Server Group Policy Home on Microsoft's site.

The first way you tried, specifying the script name with "%username%" in it probably won't fly. I'm fairly certain that environment variable expansion inside the "Scripts" Group Policy Client Side Extension (CSE) won't work. I don't have any documentation that says one way or the other, but I'd find it highly dubious.

The second way you're trying, calling a "logon.bat" from the CSE and, in that script, calling "%username%.bat" should work, provided you can get the path to "%username%.bat" right. I'd call it like so:

call %0\..\%username%.bat

That ought to get the "%username%.bat" file located in the same directory as the "logon.bat" script to execute.

Finally, be sure that your users don't have "Administrator" rights if you're running Windows Vista or Windows 7 on your client computers. If you are, and they do, then drives that are "mapped" during the logon script won't be visible in Explorer by default. (You can get some background on that here: Networkmapping script (VBS) Vista doesn't work, XP does)