> without deleteing the "domain.com" folder?
Yes, that's fine.
Create a new Zone, AD Integrated and set it to replicate to all DNS servers in the Forest. The zone would be called _msdcs.domain.com. Enable Dynamic Updates for it.
Check the existing greyed out folder for _mdscs under domain.com as well. It should have NS records telling us where the real _msdcs is hosted. Ensure that the NS Record list includes valid servers, and ensure it includes the server you just created the zone on.
After creation, restart the NetLogon service on each DC, that will add the necessary records to the new zone.
Chris
