There is one entry in the Event Log related to Kixtart; ID 1789: Failed to resolve SID(s) Error : The trust relationship between this workstation and the primary domain failed. (0x6fd/1789).

An nltest /sc_verify:domain comes back clean (0x00000000 success) and the machine functions normally (no errors when accessing network resources, printing, etc.), so this Event is bogus.

The error happens on machines without any A/V. If it were A/V, all 3000+ nodes would be throwing this error and that is not the case.

Replication between DCs is fine. Again, if it were an issue, node in an affected site site would be throwing the error.

I will have a look at