We had to remove the users account used from the GP that reassociated scripts (.cmd, .vbs etc) to notepad and then after gpupdate / force we had to reassociate
.vb* to cscript seems simple but took a few tries to get it down.
Quandry though why the use of any script for an install these days espically from a security company as that is a primary payload for many bad things?
Also how do i mark as resolved?