What is wrong with putting the files under the netlogin directory everyone has rights to it and security is already in place also I don't know but the batch path should be %0\..\kix32.exe %0\..\your script.kix% I run this along with this in the login batch.
@ECHO OFF
:checkcitrix
IF EXIST %WINDIR%\SYSTEM32\CHGUSR.EXE GOTO end

:checkkix
ECHO Verifying/Updating Script Software, Please Wait...
IF "%OS%" == "Windows_NT" GOTO WinNT
%windir%\command\XCOPY %0\..\KIX32.EXE %WINDIR%\SYSTEM\ /D /H /I /R /V > NUL
%windir%\command\XCOPY %0\..\KX16.DLL %WINDIR%\SYSTEM\ /D /H /I /R /V > NUL
%windir%\command\XCOPY %0\..\KX32.DLL %WINDIR%\SYSTEM\ /D /H /I /R /V > NUL
%windir%\command\XCOPY %0\..\KX95.DLL %WINDIR%\SYSTEM\ /D /H /I /R /V > NUL
ECHO Running Logon Script...
%windir%\system\kix32.exe %0\..\logon.KIX
GOTO end

:WinNT
XCOPY %0\..\KIX32.EXE %WINDIR%\SYSTEM32\ /D /H /I /R /V > NUL
ECHO Running Logon Script...
%WINDIR%\SYSTEM32\KIX32.EXE %1 %0\..\logon.KIX
GOTO end

:end