An alternative is some doofus didn't sysprep properly and now you have to go generate IDs, that'd be fun. One of my old jobs had a trust issue a lot with one particular image, I forget the root cause now...
Well right now it is affecting both of our network storage servers, which I don't -think- have sysprep'd images?
I dunno enough about it. Our librarian mentioned she restarted a couple computers "several times" and it eventually worked.
Aside from that we have been manually making computers leave the domain and rejoin, that has been a lot of fun and no guarantee it is permanent.