Sounds like you must have accidentally turn on add local domain users in the product settings.
This will assign the users that have physically logged into to the machine at some Point.
So you just need to edit the product setttings policy, I believe that it is on the 3rd tab.
You will also need to remove the users from the machines on question.
Hope that helps
Great thanks. I will try that.