Even if the DSS was part of the Domain that would be for only NAS not iSCSI. There has to be something blocking the 3260 port or that the Domain servers have some policy to only use certain protocols. If the servers connect directly to the DSS even in the Domain with secondary nic and lets say you can use directly connect to the DSS via the Primary nic then that would point to something in the MS servers.