Trying to clean up AD.. DCDIAG /v /e /c and DNSLint come up clean. DNS BPA is fine, but the best practices analyzer for AD DS keeps showing at least 15 items like "The AD DS BPA should be able to collect data about..."
ranging from number of domain controllers, # of GCs, connectivity of RID Master, domain name of various DNS SRV records.
I have confirmed the SRV records are there and the DC has permissions to read them. I tried running the BPA powershell file and it returns this:
WARNING: Cannot collect the list of DCs in current domain
ScriptLine: Get-ADDomainController -Filter $filter -Server $computer
Message: Directory object not found
rFault, Microsoft.ActiveDirectory.Management, Version=22.214.171.124, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]
Message: Active Directory returned an error processing the operation.
Mixture of 2008 R2 , 2012 and 2012 R2 DCs- at 2008 domain functional level and 2003 FFL (planning on updating both to 2008 R2 real soon)