Check how you're specifying the username of the account being used to join the domain in the customization file. I can never remember if it's domain\username, or just the username alone. You're also going to want to be sure you've nuked the computer accounts in AD used by prior deployments if you're naming the machines the same each time you compose the pool.
It's always the simple stuff that gets you...
Geoff
