The problem I am seeing is limited to a fixed number of users. A very small number of users.
The site that has the problem has got more than one Domain Controller. It has two.
I tried configuring Puakma ESSO to use both, but gave up. I ended up with having Puakma use just one of them.
Could my issue be related to that?
I will look into your other suggestions and questions....