One last question, regarding my double post: Have you seen this incident where UIDs are mapped to 0 automatically? Please see my last post on the previous page as well as my Centrify log to see what I mean.
We're going to keep digging, and I will, of course, update as we progress.