I run AD on 2K and have a GPO based logon script that runs every time on my XP/SP1. The error you report is a GPO issue, not a KiX issue. That, of course is of no comfort to you as you simply want to resolve the issue.

Intermittent problems are a bitch to solve, but the place to start is to run network sniffer traces.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.