have searched for solution on net with no joy.
Testing using trustnoexe and working ok - looks useful.
But it is blocking group policy logon and logoff scripts in paths such as:
Have tried adding this path into access list and also \\servername\sysvol but it is still blocking them.
Anyone come across this problem? - can add other server paths in ok.