Very interesting!

But I'm not clear on whether the two NT boxes are using the Windows NT Domain security model, and if they are joined together to participate in the same domain. Is one of those boxes a domain controller?

If not, then you've got nothing to worry about when restoring the image. The security key problems only exist if you're doing a domain.