Hi There, thanks for the reply The policy is set to Assigned and to install at logon at the user level. I have tried to set it at computer level but get the following error - "The error was : The group policy framework should call the extension in the synchronous foreground policy refresh" This has something to do with fast user switch and fast logon times which i googled and turned off via GPO. Once you restart the machine the program is there... The only problem with that is we have 650 PC with a program called Faronics Deepfreeze on, that basically returns the machine to its install state once the machine is booted/rebooted - Unless we visit each machine manually and put them in to maintenance mode and do the install..... If i do this elevated priviallages - what security risks does this make? I have toyed with the idea of making a bat file with the runas permissions set - but you can only make the password clear text - has anyone got work arrounds for this? Many Thanks Adam