If you use Active Directory and have multiple domains using a Parent Child configuration model AND your Check DNS Configuration is clean and has no errors then you can safely check this option.

If it is not enabled and you have parent child domain model and have a problem creating an object in one domain and assigning a user to it from another domain then you need to enable this option.