token cache - under HKEY_CURRENT_USER\Software\KiXtart\

My tip is to simply do a gpresult and check the output if the groups really are there as well.

second, is the files replicated ok everywere?