After running dcdiag /e this morning this was the only error but on all three Dc's?

Error on PDC

KRB_AP_ERR_MODIFIED error from the server
Administrator. The target name used was
companyname\CH-DC2-2K8$. This indicates that
the target server failed to decrypt the ticket
provided by the client. This can occur when the
target server principal name (SPN) is registered
on an account other than the account the target
service is using. Please ensure that the target
SPN is registered on, and only registered on, the
account used by the server. This error can also
happen when the target service is using a
different password for the target service account
than what the Kerberos Key Distribution Center
(KDC) has for the target service account. Please
ensure that the service on the server and the KDC
are both updated to use the current password. If
the server name is not fully qualified, and the
target domain (companyname.LOCAL) is different
from the client domain (companyname.LOCAL),
check if there are identically named server
accounts in these two domains, or use the
fully-qualified name to identify the server.
         An Error Event occured.  EventID: 0x40000004
            Time Generated: 04/28/2015   03:29:12
            Event String: The Kerberos client received a

ch-dc2-2k8
Similar error

na-dc1-2k8
similar error

• Edited by aideyuk 12 minutes ago