Maybe you should do more in GPOs and less in the logon script. Besides trying to force-feed them the logon script, if they are quasi-techo-geeks, they can just rip much of what you do in the script and undo it. You should look at doing more with central admin scripts that reach them over the MAN providing you have the bandwidth.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
