Many VPN client will execute the domain logon script for the end user. SonicWall has a checkbox in the config file, Cisco has SBL (IIRC), others may have similar mechanisms.

I have 3 sites and the logon scripts are not replicating from one of them. This domain was an in-place upgrade from an NT domain. Previously, my 2000 domains have just "worked" -- you throw the ...