We have had this issue since we started using kixtart, it works great when it works. What it doesn't do is randomly see groups in AD. One boot they get all their drives and printers, next boot it skips thru. I can specify items outside ingroups in the script and they run fine everytime. But it randlomly won't work. I used debug and stepped thru one of the logins as it failed and it acts like it either doesn't see the group or see the person in the group, is there a way to do a fully qualified for the groups or is there something else I could try? BTW I use the /F command on reboots to clear the token cache. Server 2003 and all XP workstations.