There seems to be some people suffering from problems when they try to upgrade their domain from Windows Server 2003 to Windows Server 2008. I ran in to this issue when installing a fresh Windows Server 2008 server into an existing Windows Server 2003 Active Directory. The problem is related to applying group policy, and generates error 1055 with source Group Policy on the Windows Server 2008 domain controller. This one says that it was not able to resolve the name of the domain controller, so you should check your name resolution.
The resolution seems to be the following KB article from Microsoft ; http://support.microsoft.com/kb/939820
The title seems to make a lot of confusion, and also reading the article could seem a bit “funny”. As the article states there is a hotfix available to solve the problem. While you wait for the hotfix you can try do stop the Kerberos Key Distribution Center service on the Windows Server 2008 domain controller. If you the try gpupdate /force you should be able to apply the computer policy. If you need to be able to connect with RDP from a Vista client afterwards, please read the full Microsoft article as it explains how this could be achived. And don´t forget to apply the hotfix!
We also ran into some issues with the SPN on the domain controller computer objects. The SPN problems can be checked with SetSPN command. If you compare the output of SetSPN on the different domain controllers you will be able to see the missing SPN´s.
As a minimum you should at least see the following (this is not a comprehensive list):
Registered ServicePrincipalNames for CN=dc1,OU=Domain
Controllers,DC=mydomain,DC=com:
HOST/dc1
HOST/dc1.mydomain.com
HOST/dc1.mydomain.com/mydomain.com
GC/dc1.mydomain.com/mydomain.com
LDAP/3cb25b0f-3809-48fb-8571-59f4a2253846._msdcs.mydomain.com
LDAP/dc1.mydomain.com/mydomain
LDAP/dc1
LDAP/dc1.mydomain.com
LDAP/dc1.mydomain.com/mydomain.com
HOST/dc1.mydomain.com/mydomain
E3514235-4B06-11D1-AB04-00C04FC2DCD2/3cb25b0f-3809-48fb-8571-59f4a2253846/mydomain.com
Please note that you have to look up the GUID from DNS (under the _msdcs.domain).
You list the SPNs by using SetSPN domain_controller_name
If people find this useful I will add more information later. That´s all for tonight :)