This is when your domain controller losses trust relations with itself........


Open CMD with admin priv.


You have to disable the Kerberos Key Distribution Center service


Run the command.


netdom resetpwd /server:SERVERNAME.DOMAIN.local /userd:DOMAIN\administrator /passwordd:*


Do not change ->  /passwordd:* 


When you run the command it will ask you for the password (looks like you are typing and nothing is happening, it is).


Once this has succeeded, reboot.


After reboot Verify DNS and Exchange services, then  turn on the Kerberos Key Distribution Center service and set to auto.