If you don't want to install KXRPC on all the DCs (because of too many DCs or no permissions to do it), you can always install the KXRPC on two different servers (eg: fileservers) and specify a kixtart.ini file in the netlogon specifying were to use the KXRPC services.

Hope this can help someone.
_________________________
SAVE THE WORLD - PROTECT THE PLANET