In your configuration, to the remote XP users have a domain configured? Do you have nt_domainhack enabled?