I've tried this a few times and it's possible to reproduce this every time. Take a snapshot backup from a SBS2011 (or other 2008R2 with AD) VM and restore it. When the machine boots, Active Directory is able to detect it's been restored and sets a FLAG (define DSA_WRITABLE_USNROLLBCK 4)
in the...