thank you for your quick answer.

with logonscript means, that our users would see or had to know the admin-password, right?
that's what we want to avoid.

can you tell me a little bit more what the differences are between the two options admin- and logonscript?

my imagination was, that we could put a kix script into our existing logonscripts. with that option we would be secure that every client gets the skript for execution.