We figured it out. The way we were reopening the ports after reimaging was by using netfw.inf and calling "netsh firewall reset" on startup. The instructions we found for altering netfw.inf included setting the open ports to "LocalSubnet" rather than "*" which allows them to be accessible from any subnet. Changing this fixed the problem. Thanks anyway for your help!