Do you have to enforce authenticated binding on the server in order for login hooks to work?

I've exhausted every other apparent setting, but I cannot get login hooks to work (via workgroup manager). I've edited the loginwindow.plist on the client machine. Any suggestions welcomed. Running 10.5 server, 10.6 client. AD/OD triangle setup. FZ