I don’t usually post much about Windows, but this is something that I ran into and it took some searching to find the answer. If you try to run “dcdiag” and get a message something like “missing CNAME record: <guid>._msdcs.mydomain” and it is unable to run the DNS checks this might help you. This is…