2 DSS on Same AD Domain, Different Permissions

I have 2 DSS servers on the same ADS domain. The ACLs on one machine do not match the other. IOW after replicating data with "Use ACL" set.

on server A - file is owned by foouser/foogroup
on server B - same file is owned by a different user/group

When I look at the tests log I can see that the user sand group numbers are different. Both servers are using the same domain controller IP and DNS settings and I've already rejoined the domain and erased the TDB on one server after which I had to reset all permissions on a lot of files and directories.