I did this a year ago with a .REG file I put in the users logon scripts. It worked like a champ!
Here is the contents of the Registry file (I called the file MCDAT.REG):
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\McUpdate\CurrentVersion\Update\Update Site1]
"szUNCLocation"="\\\\MACHINENAME\\SHAREDFOLDER"
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Tasks\Update]
"szUpdateUncLocation"="\\\\MACHINENAME\\SHAREDFOLDER"
Change MACHINENAME with the machine name you will be keeping the DAT files on.
Change SHAREDFOLDER with the name of the shared folder you will be keeeping the DAT files in.
That file covered NetShield users AND ViruScan users (I had both in my environment).
Make the REGfile, and place it in the Netlogon share of your Windows domain controller (or in the Sysvol if you are running Win2K with AD).
In the logon scripts for the users, put in:
REGEDIT /S MCDAT.REG
That is it. That will change it to pull from the \\MACHINENAME\SHAREDFOLDER location you specify.
It was fun to do it this way, and a whole lot easier than walking to all of the machines!
hope this helps