The security groups that you specified for the Password Replication Policy for this read-only domain controller are not valid. ...