Can't look right now but the rights should be inherited from the sysvol folder if memory serves correctly. Also try to replace both wkix32.exe and kix32.exe with newly downloaded versions.

Btw if you start the start.cmd manually from the netlogon share does it run then ?