Dcdiag fails for NCSecDesc test on Windows 2008 Domain Controllers

If you do not plan to add an RODC to the forest, you can disregard this error. If you plan to add an RODC to the forest, you must run adprep /rodcprep.