We have a couple clients that have been having authentication issues when trying to perform SRM testing, so we're trying to find a solution for them. From what I've been reading through various online sources, best practice is to use a Recovery site DC (non-bridgehead preferably, shut down the DC and clone, then join to the isolated test network for the test. But I haven't seen much detail on how important it is (or not) to have the DC you're cloning have Operations Master or FSMOS roles? Surely this can't be necessary or it could impact your production domain. Would the issue they're having be more likely attributable to time skew (NTP issues)? Thanks in advance for any input.
