First off, It's KiXtart, not KixTart!

Instead of having your VPN users logon with cached creds, you should have then logon through VPN at bootup.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.