AD 2008r2 PDC 硬盤掛了，BDC轉移角色後DNS無法打開，並有以下日誌：
When the server had rebooted the network location had changed to Unauthenticated. When trying to access the DNS console I was getting an error saying Access Denied.
如圖:
DNS Access Denied
DCDiag測試失敗，但可以訪問Active Directory用戶和計算機。
解決方法如下：
運行以下命令然後重啓來解決錯誤：
nltest /sc_change_pwd:domainname.local
PS:
Command Description:
Changes the password for the trust account of a domain that you specify. If you run nltest on a domain controller, and an explicit trust relationship exists, then nltest resets the password for the interdomain trust account. Otherwise, nltest changes the computer account password for the domain that you specify. You can use this parameter only for computers that are running Windows 2000 and later.
Once the server had rebooted the network location changed back to ‘Domain’ and DNS was accessible. All client machines was then able to access the server.
Comments on my blog have indicated that this fix also works with Server 2012 R2.