This message was deleted.

Had this a while back, it was related to the functional level set on the machine catalog, was that changed ?

no, turns out the client wasn’t doing dns scavenging and every IP had about 5 host entries so the DDCs were picking the wrong hostname to send return traffic to