When the master is non-domain and using Instant-Clone I found that that we had to setup a local startup script to perform a gpupdate /target:Computer to get the computer gpo
