@x23piracy that did the trick for me, now i just need to read up on where to put that handy CMD file you wrote. thanks so much.
For those that are doing that post deployment where a user already logged in, had to reboot in safe mode, delete the files, remove the profile from profilelist in registry, change the folder name in c:\users\USERNAME to c:\users\USERNAME.BAK, reboot, and then the user logged in again and it was good.