У меня несколько другая проблема, которая, как я подозреваю произошла после смены пароля Администратора:
На ГКД примерно раз в 2 часа появляются ошибки
Код:

Как я думаю, ошибки (см. ниже) стали выползать после того, как был изменен пароль built-in Администратора. Ошибки следующие:
Application:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 01/08/2010
Time: 08:25:36
User: METAL\administrator
Computer: DCNEW
Description:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=metal,DC=local. The file must be present at the location <\\metal.local\sysvol\metal.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Logon failure: unknown user name or bad password. ). Group Policy processing aborted.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 01/08/2010
Time: 08:25:36
User: METAL\administrator
Computer: DCNEW
Description:
Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
и System :
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 01/08/2010
Time: 08:25:36
User: N/A
Computer: DCNEW
Description:
The Security System detected an authentication error for the server cifs/dcnew.metal.local. The failure code from authentication protocol Kerberos was "The attempted logon is invalid. This is either due to a bad username or authentication information.
(0xc000006d)".
И вот результаты отработки команд на двух КД
Код:

У меня два контроллера - Dcnew - главный - и BDC - второстепенный
Главный контроллер - Dcnew
Netdiag /q
........................................
Computer Name: DCNEW
DNS Host Name: dcnew.metal.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 30 Stepping 5, GenuineIntel
List of installed hotfixes :
...
Per interface results:
Adapter : Local Area Connection 2
Host Name. . . . . . . . . : dcnew
IP Address . . . . . . . . : 192.168.150.199
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.150.100
Primary WINS Server. . . . : 192.168.150.199
Secondary WINS Server. . . : 192.168.150.205
Dns Servers. . . . . . . . : 192.168.150.205
192.168.150.199
Global results:
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server '192.168.150.205' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '192.168.150.199' and other DCs also have some of the names registered.
IP Security test . . . . . . . . . : Skipped
The command completed successfully
Dcdiag /q
An Error Event occured. EventID: 0xC25A001D
Time Generated: 08/01/2010 11:53:06
(Event String could not be retrieved)
......................... DCNEW failed test systemlog
Ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : dcnew
Primary Dns Suffix . . . . . . . : metal.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : metal.local
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) 82574L Gigabit Network Connection
Physical Address. . . . . . . . . : 00-21-5E-67-50-99
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.150.199
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.150.100
DNS Servers . . . . . . . . . . . : 192.168.150.205
192.168.150.199
Primary WINS Server . . . . . . . : 192.168.150.199
Secondary WINS Server . . . . . . : 192.168.150.205
Repadmin /showreps
Default-First-Site\DCNEW
DC Options: IS_GC
Site Options: (none)
DC object GUID: a52bdc5b-ff1f-4ecc-9390-a2bf459d29b6
DC invocationID: b7ead90e-d132-42ac-93c1-cb7726921982
==== INBOUND NEIGHBORS ======================================
DC=metal,DC=local
Default-First-Site\BDC via RPC
DC object GUID: 73ebe5a3-9212-4fff-ba5c-a27f2eca1db7
Last attempt @ 2010-08-01 12:21:49 was successful.
CN=Configuration,DC=metal,DC=local
Default-First-Site\BDC via RPC
DC object GUID: 73ebe5a3-9212-4fff-ba5c-a27f2eca1db7
Last attempt @ 2010-08-01 12:16:41 was successful.
CN=Schema,CN=Configuration,DC=metal,DC=local
Default-First-Site\BDC via RPC
DC object GUID: 73ebe5a3-9212-4fff-ba5c-a27f2eca1db7
Last attempt @ 2010-08-01 12:16:41 was successful.
DC=DomainDnsZones,DC=metal,DC=local
Default-First-Site\BDC via RPC
DC object GUID: 73ebe5a3-9212-4fff-ba5c-a27f2eca1db7
Last attempt @ 2010-08-01 12:16:41 was successful.
DC=ForestDnsZones,DC=metal,DC=local
Default-First-Site\BDC via RPC
DC object GUID: 73ebe5a3-9212-4fff-ba5c-a27f2eca1db7
Last attempt @ 2010-08-01 12:16:41 was successful.
Дополнительный контроллер BDC
Netdiag /q
.........................................
Computer Name: BDC
DNS Host Name: bdc.metal.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 4 Stepping 3, GenuineIntel
List of installed hotfixes :
...
[WARNING] The net card 'Marvell Yukon 88E8050 PCI-E ASF Gigabit Ethernet Controller - Teefer2 Miniport' may not be working.
[WARNING] The net card 'Marvell Yukon 88E8050 PCI-E ASF Gigabit Ethernet Controller' may not be working.
Per interface results:
Adapter : Local Area Connection 2
Host Name. . . . . . . . . : bdc.metal.local
IP Address . . . . . . . . : 192.168.150.205
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.150.100
Primary WINS Server. . . . : 192.168.150.199
Secondary WINS Server. . . : 192.168.150.205
Dns Servers. . . . . . . . : 192.168.150.199
192.168.150.205
Adapter : Local Area Connection
Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.
Host Name. . . . . . . . . : bdc
Autoconfiguration IP Address : 169.254.245.188
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . :
Dns Servers. . . . . . . . :
Global results:
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.
DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the name
'bdc.metal.local.'. [ERROR_TIMEOUT]
The name 'bdc.metal.local.' may not be registered in DNS.
PASS - All the DNS entries for DC are registered on DNS server '192.168.150.199' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server '192.168.150.205' and other DCs also have some of the names registered.
IP Security test . . . . . . . . . : Skipped
The command completed successfully
Dcdiag /q
Warning: BDC is not advertising as a time server.
......................... BDC failed test Advertising
Could not open w32time Service on [BDC]:failed with 1060: Win32 Error 1060
......................... BDC failed test Services
Repadmin /showreps
Default-First-Site\BDC
DC Options: (none)
Site Options: (none)
DC object GUID: 73ebe5a3-9212-4fff-ba5c-a27f2eca1db7
DC invocationID: 24fc05e0-f880-4224-8a36-70440af21918
==== INBOUND NEIGHBORS ======================================
DC=metal,DC=local
Default-First-Site\DCNEW via RPC
DC object GUID: a52bdc5b-ff1f-4ecc-9390-a2bf459d29b6
Last attempt @ 2010-08-01 12:22:21 was successful.
CN=Configuration,DC=metal,DC=local
Default-First-Site\DCNEW via RPC
DC object GUID: a52bdc5b-ff1f-4ecc-9390-a2bf459d29b6
Last attempt @ 2010-08-01 11:59:43 was successful.
CN=Schema,CN=Configuration,DC=metal,DC=local
Default-First-Site\DCNEW via RPC
DC object GUID: a52bdc5b-ff1f-4ecc-9390-a2bf459d29b6
Last attempt @ 2010-08-01 11:48:51 was successful.
DC=DomainDnsZones,DC=metal,DC=local
Default-First-Site\DCNEW via RPC
DC object GUID: a52bdc5b-ff1f-4ecc-9390-a2bf459d29b6
Last attempt @ 2010-08-01 11:48:51 was successful.
DC=ForestDnsZones,DC=metal,DC=local
Default-First-Site\DCNEW via RPC
DC object GUID: a52bdc5b-ff1f-4ecc-9390-a2bf459d29b6
Last attempt @ 2010-08-01 11:48:51 was successful.
Ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : bdc
Primary Dns Suffix . . . . . . . : metal.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : metal.local
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . : metal.local
Description . . . . . . . . . . . : Intel(R) PRO/100 M Network Connection
Physical Address. . . . . . . . . : 00-13-20-49-8A-14
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.150.205
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.150.100
DNS Servers . . . . . . . . . . . : 192.168.150.199
192.168.150.205
Primary WINS Server . . . . . . . : 192.168.150.199
Secondary WINS Server . . . . . . : 192.168.150.205
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8050 PCI-E ASF Gigabit Ethernet Controller
Physical Address. . . . . . . . . : 00-13-20-49-8A-13
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IP Address. . . : 169.254.245.188
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
Прошу помощи