Well, let me throw one more factor in the mix here.....

This is on a SQL active\ passive cluster. For one physical node, it will work for some accounts...on the other node (when it is the active node) it will work for those accounts on the 1st node and on the 2nd node in addition to some accounts that would not work on the 1st node.

Any ideas???