That is an interesting point! It got me thinking.... Found 2 tools from PsTools---PsGetSid, and NewSid. (GetSid from Resource Kit) This should help me troubleshoot further.

Tried renaming a PC with different NETBIOS name & then joining domain. Initially, I was able to see domain listed under "From this location". I proceeded to test on other PC's, but with no luck. Looked on PC(about 15 minutes later) that I initially had success on to see if domain still listed under "From this location". It had fallen off to local account.

I will try the SID route in more detail. If not successful, will resort to sniffing traffic.

BTW, anyone know what reg keys to look at for SID's in registry? (Interested in pickin' someone brain....Didn't find anything that jumped out at me via Google, or searching antionline)

Many thanks!