The domain controller "{0}" is in compliance with this best practice. The KdcAtSite DNS record for the domain controller ...