I found some oddities with casper here, and since we use laptops and are not always downloading new policies, I created a launchd item and a script...the launchd item loads on boot and executes the script - the last two thing the script does is to securely delete the launchditem, and then the script itself...reboots if needed. -j