For my case, we were using gMSA accounts and even though the AD Computer object was added to the right group in AD, it didn't take effect until the next reboot. Rebooting the computer fixed the issue.