FYI- the GPO doesn't run from netlogon, but the logon script does.