Okay, I tried the kix32 /f while logged in as a user that is a member of one of the problematic groups, and sure enough, at next login the group name was correct. Thanks!

Now my question is what would be wrong with adding the "/f" to our main batch file such that the switch runs at each login for all users? Is there a big performance hit by not taking advantage of the local cache? Conversely, is there a way to set a frequency for the cache to be refreshed say once per week or even once per day?