MP on a domain controller

I have 130 secondary sites that also function as domain controllers. When a
server is rebooted the MP starts logging "Http verification .sms_aut (port
80) failed with status code 503". From what I can tell this is occuring
because the IUSR and IWAM accounts can't authenticate because AD is not
available when IIS starts. Performing an IISReset and restarting the SMS
Agent Host service resolves the issue, but this can get tedious on a patch
weekend. Anyone know of a permanent fix for this?

I stumbled accross an old article that suggested making the IISADMIN service
dependent on NETLOGON and DNS, but that didn't work

"Scott Garrett" wrote:

> I have 130 secondary sites that also function as domain controllers. When a
> server is rebooted the MP starts logging "Http verification .sms_aut (port
> 80) failed with status code 503". From what I can tell this is occuring
> because the IUSR and IWAM accounts can't authenticate because AD is not
> available when IIS starts. Performing an IISReset and restarting the SMS
> Agent Host service resolves the issue, but this can get tedious on a patch
> weekend. Anyone know of a permanent fix for this?