I am seeing this same issue on my end. From what I can tell, Windows DNS does not like having a DNS zone that is not a valid Kerberos identified member. Have you had any luck suppressing the error from DCDIAG without deleting the entries needed for printing ?