When I configure any XP workstations to logon our domain, once a user uses their new AD login, everything goes well, except they have very restrictive permissions. (Eg: If a user opens any existing file, they do not have write access, except in their documents folder.) Since these guys are working on low system level events, they need to r/w all files.