I have a Win 2008 R2 domain controller running DNS. The DNS service stopped running yesterday and will no longer start. The error is 1297: "A privilege that the service requires to function properly does not exist in the service account configuration." The DNS service is logging on as the domain administrator account. I'm a bit concerned about the root causes of all of this unpleasantness but primarily would like to know what privileges are missing which would allow the DNS service to start properly.