There are some similarities.

1) My TokenCache is not always retrieving all the Groups. (I was not watching this before so I ran some quick tests. On Average I am retrieveing 75-80% of the member groups. Apparently the group I needed was early in the 'pull list'.)
2) This domain has trusts with MANY other domains (I would say 50+ domains)
3) Corporate has an Active Directory Domain. They will be deploying it soon.

I do not believe the Active Directory domain is currently trusted with the 'working domains'. However, corporate does say they have some people at higher level on that domain.

I admit that I am a newbie to kixtart, and most of my network knowledge has been learned from trial and error and book reading. So sometimes I am still a little nieve on some of the inner workings

Just a sidenote Kixtart 3.63 did not help my time any.