You can use this recipe to test the secure channel for a domain-joined device.
To test the secure channel, the device needs to be on the same logical networks as at least one of the domain controllers. You might be able to rename a device when connected through a VPN connection—when the required traffic is allowed through.
When a specific domain controller is specified, make sure the Netlogon service is running.
There are two ways to test the secure channel for a Windows 10-based device: