Diagnosing issues with active directory authentication

  1. Ensure all DC and client machines system clocks are correct and synced
  2. Run dcdiag /q on the DCs, ensuring there are no errors
  3. Check the event logs for DFSR and AAD events and ensure there are no errors