Since you are obfuscating the details, it is hard to know if you got the parms correct. I mean, in your first example, your DC was just ORG, and now it is FOO.ORG so as long as you feed us bogus info, we cannot hazard a guess.

Why not just VPN in and test?
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.