SYSVOL and NETLOGON folders weren’t syncing between domain controllers or the folders did not exist at the secondary DC. If you have this issue, users that authenticate at the DC