I agree with Witto here, all logon stuff should be run from the netlogon share. If you really feel the need to run it from the local %windir% consider deploying the kix executables.

Btw Witto:
\\domain.ext\sysvol\domain.ext\scripts\ And \\domain.ext\netlogon\
are one and the same \:\)