Unable to contact Active Directory to access or verify claim types

Question

Hey Guys,

In the AD domain environment. I want to update a user's "Special Permissions" for a folder on a server.

The advanced permissions are however grey. I see the error at the bottom "Unable to contact Active Directory to access or verify claim types"

I have investigated and troubleshooted the error message and noticed this error across most servers on our network (on-prem and cloud) - I have checked the DNS, Firewall etc...all working fine and couldn't spot any issues. In the end I rejoined one of the server back to the domain that solved the issue but surely I can't do this to all servers - I am pretty sure there's option, I appreciate in advance any assistance in this matter.

Thanks

Answer 1

You could check

Test-ComputerSecureChannel 

and if needed

Test-ComputerSecureChannel -Repair

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Sounds good, might also work through this one.

https://learn.microsoft.com/en-us/windows-server/identity/solution-guides/deploy-a-central-access-policy--demonstration-steps-

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Set primary DNS to your DC server.