>I need to betray my ignorance here. If a machine is a standalone and has no (physical) NIC, what does CoCreateGuid() use?

It creates a stastically unique value, and returns an HRESULT indicating that it has done so. This value is stastically unique (IOW, the odds are pretty good that it's unique) globally, and is only truly unique on the local machine.