So, it was the synchronous setting in Group Policy, it just took a reboot, not a logoff to take effect. So it's working now. I thought it used to be recommended to have synchronous on back in the day, but maybe that's changed... All seems to be working anyway...

Thanks!
Mike