I must dispute Rory's theory. Netlogon is part of sysvol replication, and if there is any issue with failed replication, netlogon would not even be published. That and the user did say he sees the script run.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.