Do you have something like deepfreeze installed which is reverting it back to the previous state?
On a sidenote, we had something similar happen years ago with DS 6.8. We tried to multicast an image to the entire campus and for some reason, the machines never rejoined the domain and changed all of the computer names to a random string value...