http://blog.drewery.net/2006/10/24/vbscript-to-output-the-logon-script-assigned-to-each-user/
Can be easily rewritten to give the profile path or other field.