Your right. Remove the DomainName and it works. The Resource domain does not have a trust to itself. therefore it does not recognize the name.I have seen similar behavior in some of my Perl scripts with the Lanman::NetGetAnyDCName($server, $domain, \$dcname). The underlying API must only examine the TRUSTS (secure channels) that it has available.
A workstation can only see the DC to which it is connected. that DC can only see and resolve domains that it trusts. This really sucks.
