gman,
Could be something in the users shell specific rc file (.kshrc .cshrc). If the user has something in their path that no longer exists, the OS will try to make a link to that path until it times out. One thing you could try is have the user login under Command Line Login instead of CDE. Error messages may appear when he does that. Or, as root, su - <username> to see if there are any errors.