I am little confused how your network is setup.
Is the \\BMCEN01 the PDC and \\BMFIN02 is setup as a Stand-Alone server ?
Do you have any BDC that are connect to the same domain as the \\BMCEN01 server is in ?
If this is the case, workstations (Win95 clients) that connect to the \\BMCEN01 domain will always send requests to the \\BMCEN01 server to be validated, and it will check to see if the account is in either a global\local group on that domain.
If the \\BMFIN02 is a Stand-Alone server is it involved in a domain or workgroup ?
If it is in the workgroup then the NETLOGON dirsync will have errors because it is not a part of the domain, which will create errors on executing the login script about missing files.
Have you tried specifying the mappings as follows IF INGROUP("<domain>\<group>") ?
If you can run the Kixtart script manually from the NETLOGON shared folder without any Kixtart errors then the problem is related to the servers and how they are communicating to each other.