Some steps repeated over and over again to verify domain connectivity….
nltest /dsgetdc:domain.top
klist get cifs/node.domain.top
klist cloud_debug
Resolve-DnsName _ldap._tcp.dc._msdcs.domain.top -type srv
Resolve-DnsName _kerberos._tcp.dc._msdcs.domain.top -type srv
Test-NetConnection controller.domain.top -port 389
Test-NetConnection controller.domain.top -port 88
Test-NetConnection controller.domain.top -port 445