Ensure that "DsaCname" is not configured in the "DnsAvoidRegisteredRecords" list, either through Group Policy or through ...

Ensure that "DsaCname" is not configured in the "DnsAvoidRegisteredRecords" list, either through Group Policy or through the registry. Restart the Netlogon service. Verify that the DNS CNAME resource record "{4}", pointing to the local domain controller "{0}", is registered in DNS.