12 April,18 at 11:48 PM
Problem:
Agent Configuration shows "Access denied" error instead of prompting for credential when joining zone.
Cause:
If the Windows 2012 R2 Domain Controller does not have the security fix released by Microsoft
Resolution:
Install Microsoft security release:
https://support.microsoft.com/en-my/help/2953565/incorrect-allowedchildclasseseffective-value-when-you-create-a-domain