Excuse my French but I've dealt with this off and on in the past, almost always traced to some small network-config or object permissions change introduced by some patch. Anyhow, it starts with ...

Group Policies are essential to keeping Active Directory resources secure. At the same time however, group policy objects are a favorite target for attackers who may leverage group policy to spread ...