The architecture is as follows:
server1 is a domain controller.
kxrpc installed and running on server1.
server2 is a file server.

In user manager, user profile, logon script name, defined a.bat, which is on server1.

a.bat calls b.bat on server2.
b.bat copies the 3 kix dlls, if doesn't exist to the client and calls kix with 1.scr.
1.scr uses ingroup to check user membership in one of the groups.
Neither local, nor global groups are identified for a user defined in the domain on server1.

Thanks,
V.F.