Hi!
DNS, AD service, and NTP server all all synced between ISE and the AD instance we are trying to sync here.
The one remaining test that fails is Kerberos, here is the error message:
Could not get Machine account info : Machine is not joined to ...