problem is no longer occuring. I suspect that someone that manages AD sent out a policy that screwed the domain registration of the systems up after reboot and then found out what problems were going on and reverted the GP to a previous incarnation. unfortunately, they'll never own up to it if that is indeed what happened. We did notice some wierd things happening in GP during this event, but never looked to see if it restricted domain access to the systems.