Hi Carter,
I got this to work, however....
When an LDAP user logins into the computer they get prompted with "The System was Unable to unlock your Keychain" .....any ideas?
I have gone into the "default" user and deleted the Keychain, restarted and ran your script again. The keychain error is still present.
thanks for any help