Yes, the userdomain is in most cases the domain that the computer is in. Some exceptions can be made with a domain forest and trusts etc... but I think this is not in use in your setup.

Ok if it is at logon then it will most likely be a logon script that should be located in \\EnterTheUserDomainHere\netlogon. If the script files are not encrypted you should be able to open them with notepad for example, read the contents and take out all the COOKIE1 commands. Regular users cannot write to that location so you may need an admin to save the changes if you do not have permissions to write there yourself.
_________________________
Mart

- Chuck Norris once sold ebay to ebay on ebay.