Dont know if its related yet, but after applying SP4 to
domain controllers, an 1168 NTDS DAtabase error starts
appearing in the Directory Services event log. Could be
coincidental.
I dont suppose youve come across this error before?
Cant find a solution, other than the technet advice which
doenst work.