The EventIDs are certainly AD permissions but the inconsistencies are something else. You don't really say how you call your script. It could be the BATch file or how you path. If you use %LOGONSERVER%, try using:
\\domain.com\NetLogon\KiX32.exe \\domain.com\NetLogon\script.kix
It has been reported that sometimes %LOGONSERVER% comes up empty.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
