But you must be running the logon script as a policy aren't you? Otherwise I would think it would not treat it as an authorized and elevated operation if just calling it as a normal entry in user management.

KIX32.EXE LOGON.KIX

Have not been there and tested it but sure was a slew of complaints on the Web over it I thought.