What enterprise security tools do these systems run? What Anti-virus? Systems management? Logging? Hardware diagnostics? What group policies have you set?

Windows is far from perfect, but these other tools that are supposed to help you are more often the source of site-wide problems like what you've described.