Insufficient permissions or time sync issue. Fix: Ensure your user account has “Add workstations to domain” rights or have a domain admin help. Also sync time with DC (run w32tm /resync ).