Right something weird is going on with this laptop! I can get the script to run only if I create a GPO at the users who is trying to login OU, that contains an entry for the logon script in the users script section of the GPO (we already have this defined in top level OU and there are no block's on GPO inheritance etc), it then runs fine! If I remove that GPO the kix portion doesn’t run! VERY strange. I’ve tried taking the PC out of the domain and adding it back in but that doesn’t work either.