It's actually a workaround to a bug of sorts. Essentially, unless the "Domain Users" group is explicitly declared in the local "Users" group on these NT 4.0 machines, a set of permissions is missing which causes an error to pop-up whenever the control panel is opened with the legacy SMS 2003 client on an NT 4.0 workstation if the user account and machine account are in different domains.