Well, im always in for a good conversation
I have the same envirement as you have....

To my knowledge this is the correct order with synchronous script...
1) USER AUTHENTICTION
2) LOGON SCRIPT RUNS
3) SERVER PROFILE COPIED TO WORKSTATION
4) WINDOWS NT POLICIES APPLIED
5) USER GETS DESKTOP

If A-synchonously script is set then:
1) USER AUTHENTICTION
2) SERVER PROFILE COPIED TO WORKSTATION
3) WINDOWS NT POLICIES APPLIED
4) LOGON SCRIPT RUNS
5) USER GETS DESKTOP

regards,

Maarten