I'm wondering though if it has anything to do with some of the offered (not critical) updates that Microsoft has offered for policy stuff.

I would not expect a Native 2008 AD to have any issues, but what others appear to be seeing is due to AD 2000, 2003 which is very old even for Vista let alone Windows 7

Maybe Microsoft just missed the boat on this and it slipped by in testing.