the audit.kix script is being called from the main network logon script, yes.
it's definately running audit.kix cause it's making the logfile OK.