I have two completely separate customers currently using domain security policies in their networks to limit their desktop privileges and redirect their folders. 90% of the time it seems to work fine. However, sometimes, users are logging in and getting a message stating "You've been logged in with a temporary profile" and all of their folder redirection is gone. Folder redirection is IP and I feel comfortable ruling DNS out. There are also no other obscure network issues and it seems as though I can see both the offending PC and the Policy Server when answering the service call. It's consistent at both customers.