The ability to run a script in a policy "on user login" would be great. We use this as a sort of 'GPO' replacement. Example: checking for a registry key to modify an outlook setting for a user on a computer, then adding or updating it if needed for that user.