Why two scripts with a login in between: the per-user policies and launcher shell live in the account's profile, which doesn't exist until its first logon. create.ps1 makes the account, the login ...