With NT4 and 2k you dont authenticate against netlogon when coming in remotely. 9x does. So you'd actually need some sort of check in your .bat file to run the full path to the script if vpn'd in. IE start kix32 \\servername\netlogon\kixfile.kix