I'm having the exact same issue, on a brand new laptop which has never joined a domain; it's never touched the domain and still says "workgroup" in the domain. I've checked everything mentioned here; no removable media restrictions have been configured in local policy. No USB storage devices...