ChrisPohts,
OK, if I understand you right, the problem is when you use VPN over RAS. Have you done any testing of RAS without VPN? Now what's left is to ascertain if KiX's InGroup function is contributing to the slowness.

Try RASing in without VPN and without running the logon script. From a DOS prompt issue a NET USE command and time it. Then write a one line KiX script with the USE command and time it. Then try it with VPN over RAS.

It may be useful to know what OS the clients are. Also and whether there are protocol, provider, or WINS issues. If you have unnecessary protocols, the binding order may not be optimal. If you have more than one provider, the order may be wrong.

Other possible issues may be with name resolution. Try populating your LMHOSTS and HOSTS with your servers' names and IPs to troubleshoot.

_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.