Although my XP workstations are connected to the domain, after booting
firewall.cpl reports they're "using non-domain settings".
Official literature tells me it's an issue with the DNS suffix of its connection not matching the DNS name on the last group policy update, however this doesn't seem right as applying
gpupdate /force correctly fixes it to "using domain settings".
How can I get the firewall to correctly detect it's on a domain upon boot?