Did you try running a gpupdate /force before sealing your image?
I don't know if its required, but I have recently added that to my cleanup script. I haven't really seen a difference in my case (my master image is not in the domain) but it I guess it can't hurt.
