Reply to post:

We've worked around this in our internal DNS by pointing aadg.windows.net.nsatc.net at their US servers instead of their European servers - that's obviously no help if you don't have your own DNS servers, though.