I take it this is in the logon script?

do the local users have local admin rights, since the logon script runs under their security rights.