I have 2 domain controllers that are a child domain of a larger forest. The forest is running at 2000 Level.
My DC's are 2008. I am told by the forest Admin's that it isn't a problem.
Starting around this past weekend, domain functions started to become very slow. I noticed some odd issues but the one that sticks out the most is when I go to add a domain user account into the authorized remote desktop users, the domain account show up with a little head and a question mark next to it.
I can click "Add" and after about 2 minutes the domain directory appears. I can add a domain account, it looks normal, but when it gets to the workstation it turns into this icon again.
Not sure if it is related, but when I was installing some software on a member server I got an error about the compute not being trusted. I googled that error and I found a hit to take the member server into a work group and then put it back in the domain. I did it about 10 times and it didn't work until today.
However the question mark with the head still appears.
DCDIAG shows no errors. DNS looks good.
any one have any ideas?