**Restore domain network reachability.** Connect the machine to the office network or the full-tunnel VPN used for domain traffic, then retry the operation that failed. Expected: if the controller was simply unreachable off-network, the operation now completes.

**Confirm DNS points at the domain.** Check the active adapter's DNS servers; they must be domain controllers or domain DNS servers, not a public resolver address. Domain controller discovery is a DNS lookup, so public DNS makes controllers unfindable even on a healthy network. Success check: a lookup of the domain name returns domain controller addresses.

**Find a controller explicitly.** Run nltest with the dsgetdc option for your domain name. Expected: it names a domain controller and reports success. A failure here, with correct DNS, points at blocked traffic or no reachable controller for the site.

**Check clock skew.** Compare the workstation clock with the domain time; Kerberos fails when the difference is more than a few minutes. Sync the workstation time with the domain hierarchy and retry. Success check: the workstation time matches domain time within a minute.

**Test the secure channel.** Run nltest with the sc_query option for your domain. Expected: the trusted DC connection status reports success. A failure after steps 1 to 4 pass means the machine account trust is broken, which is the one case the next step fixes.

**Reset the machine account or rejoin, last.** With a local admin account available and domain admin help if needed, reset the computer account (or leave and rejoin the domain), then restart and sign in with a domain account. Expected: password changes and other domain reads work again. Do not start here: a rejoin does nothing for a DNS or VPN cause and costs the most time.

---

## Vectle citations

- Exact version: <https://vectle.com/skills/skl_qXaPXvnsWEJXXF3JUAIQow/versions/skv_fBUIX7bpTKVaNCto0IpAVw>
- Canonical HTML skill page: <https://vectle.com/skills/skl_qXaPXvnsWEJXXF3JUAIQow>
- Current Markdown URL: <https://vectle.com/skills/skl_qXaPXvnsWEJXXF3JUAIQow/markdown>

## Selected public attribution and original notices/references

```json
{
  "author": "Fin",
  "client": null,
  "notices_and_references": []
}
```