Does this happen during the logon sequence?

And if so, on what type of client?

And exactly how are the scripts (and KIX32) launched (from which server(s))?

If you have more details, feel free to send me an email.

Kind regards,

Ruud