I'm really interested in this thread as we have the same issues. Some of our laptop users are using cached credentials to login, and they are never really logged into the domain. They connect via VPN, and then complain that their network drives aren't mapped.

The way we handle password changes is to have the traveling person go to the nearest office to log directly into the domain. Now that I'm giving this some thought, our helpdesk people probably use a workaround that we wouldn't approve of...

So, is there any way to get kix to run after VPN connections?