Post #3539574

I had a particularly frustrating issue caused by a WAN failure in a multi-WAN, multi-site AD this week, and time drift turned out to be the culprit. Although the member server that kept losing trust could reach all DCs, its *nearest* DC could not reach the PDC emulator DC in another site. This caused resync to fail on both the nearby DC and the affected member server. A direct VPN link from the nearby DC to the PDC emulator solved it for the DC, after which recycling w32time fixed the member.