How to check if NSG can negotiate with the AD server?

[Deleted User]

If you have found that fail to do the authentication with the AD server then you might need to check the following CLI to check if it can

_debug domain-auth test profile-name [ad profile name] username [username] password [password]

if you got the result of "The configure is not ok!" then you might need to confirm your AD setting, it's usually because the administrator privilege setting, please try to use the default admin setting in AD server.