Domain controller rejected Netlogon secure channel

Logged when the domain controller refuses the secure channel for a Netlogon network logon, Radiator sets up a new secure channel for machine_account, and the domain controller refuses that channel as well. A refusal is an access-denied status or an access-denied or security-package fault, so ntstatus is 0xc0000022 or 0xc0020057. The secure channel is discarded, and the backend waits before it authenticates the machine account again, as described in Netlogon connection setup is backing off.

Check that machine_account exists and is enabled on the domain controller at endpoint, and that no other system uses the same computer account. Every system that authenticates with the account replaces the secure channel that the domain controller stores for it.