All of the kerberos tickets will needed to be reset for the Domain Controllers. Contact Microsoft for steps on how to reset the tickets. If left alone, they will reset automatically after 10 hours (by default). This issue has been resolved in the latest rollup hotfix. Click here to download the latest hotfix (download link found in Resolution section).