We have a two way trust in place between two Windows forests.
We get "errors" constantly on our domain controllers in both AD forests regarding clients whose IP addresses don't conform to an AD site subnet.
The reason I think I understand. Client from FOREST-A travels to a location in FOREST-B and logs on with their FOREST-A account. The computer gets an IP address from a DHCP server in FOREST-B but the AD authentication occurs across the WAN back to a DC in FOREST-A. That DC then logs the error in the c:\windows\debug\netlogon.log file on the DC as it authenticates the client.
While it's probably safe to ignore the error...is there a way to actually remedy the issue?