What I found is some user who uses PDC to authenticate his/her identity has not run the scripts I added to the beginning of the orginial login.kix!

And some users in other BDCs have run this script!

Any idea? Appreciate your help.