If the domain controller account isn't located in the root of the Domain Controllers organizational unit (OU), you may encounter one of the following issues and receive the corresponding error messages: Microsoft Key Distribution Service (KDS) start failure: System error 1064 has occurred.