The strange thing is that the TokenCache on those 2 PC's is almost empty, only local groups are in.
So there is nothing about the membership of Domain Groups.