Were these computers out of contact with the domain controller for more than 30 days? Computers have passwords that by default update every 30 days with AD. Often when computers, especially laptops, are outside of the corporate network for more than 30
days this will happen. This
link may lead to you to some ways to test this. YOu can reset without rejoin by using netdom however it is not installed by default on workstations. You can also test with powershell
using 'Test-ComputerSecureChannel -repair'
Britt
