Using ZCM 10.3.2 on Windows 2008 SP2, Clients are Windows XP SP3. DLU policy assigned to users and users are volatile.

On each client, the group membership of the user is not always included according to the User Configurations settings of their Dynamic Local User policy. Log in is always successful and any Roaming Profile Policies are also always successful, however only 1 of every 10 log ins gets a successful group membership. 9 out of 10 times the user is logged in but can do nothing on their local machine because their user has NO group membership. I have checked the DontUpdateGroupMemberships registry entry and it is set to 0.

Any Suggestions?