setup a GPO that specifies a user logon script but only at certain machines

we need to be able to setup a GPO that is applied to a computer and no matter what user logs into that computer have a login script execute, it cannot be a startup script on the computer side but and actual user logon script… any ideas how to accomplish this?