DNSSEC & LDAP Bind function call failed

Question

I have a forest with 17 domain , Trust between these domains is tree-root.
I config DNSSec on 1 domain . some policy from this domain is linked to another domains.
after replication between domains and replicate Trust anchor , when i type Gpupdate /force on another domains i receive this Error:
The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description.
User Policy update has completed successfully.

domain' s firewalls are off

Answer 1

What is the connection between Ldap and Dnssec?

Answer 2

I get This error after nslookup dnssec server

when i set conditional forwarding or stub zone ( domain have dnssec) on another domains without dnssec, solved This error.

Answer 3

Hi,

We need to capture a network trace for the authenticates processes to get more details that why the authentication failed.
If there are error messages in the network package, you can share a screenshot of it.
Due to the security reason and rule, it is not suggested posting all the package here.

Best Regards,

Answer 4

error Code: 1006

Answer 5

Hi,
Welcome to ask here!

Would you please share the error code and more details?
To diagnose the failure, review the event log and run GPRESULT /H GPReport.html to get more details.
If possible, you can share a screenshot here. (Please hide the private information)

Best Regards,