Exactly like described in my implementation. Each organization manages their own scripts. Actually, in the W2K infrastructure the local OU scripts for the clients are executed from the resource domain DCs and not the logon domain in our company. That way the client has a local server that delivers the script and they are under local management.
