Question : Problem running script with Group Policy

I have a Windows 2003 AD enviroment. In my Defauilt Domain policy I have added a batch file that will add a Global Group to the locate admins group on each workstation. The problem is the script does not process when users log in I tried to add the script under User Configurtion and Computer Configuration and neither one worked. I know my script works becuase I double click on it , it works fine. I also now my Default Domain policy is working because I my new workstations are receiving the updated WSUS settings which are pushed out through this policy: Any thoughts... Please see my script below....

net localgroup administrators /add "starnet\spallusers"

Answer : Problem running script with Group Policy

Tried this as a user policy, and it seem to work:

Download RUNASSPC (http://www.robotronic.de/runasspcEn.html)

Now you're gonna create an encryptfile using RunasSpcAdmin.exe.

In the path\application path you give the command: %systemroot%\system32\net.exe
Click optional settings and give the Program options: localgroup administrators /add "starnet\spallusers"
(and of course you fill in the authentication fields)

Now you created an encrypted file (lets say crypt.spc), and you can use the command runasspc.exe /cryptfile:"crypt.spc" /quiet