OK, i have a feeling it is detecting 'slow link' and shutting down the 'Scripts' as that is the default behavior for it.:(
i really thought it would pull the script from the local RODC but for whatever reason my default %logonserver% is changing. i had the RODC acting as the proper one for a day and then it is changing to our other DC's that aren't at that remote site.
hmmm...