I had an issue similar to this. My VM template was joined to the domain, and I would always logon as the local administrator to update it. Unknowingly, the AD computer account had disabled/changed/SID was updated at some other point. Solution was to disjoin domain, and rejoin, all subsequent linked-clone functions worked, correctly.