Trust Relationship in Domain Controller – The target principal name is incorrect

In case that your domain controller can not replicate with other domain controllers and you suspect that it is connected with trust relationship is broken (The target principal name is incorrect) try to do the following: klist purgenetdom resetpwd /server:westus-ad02 /ud:globalmariusz.ferdyn-adm /pd:Confirm101%abpowershell -command “Restart-Service kdc -Force”powershell -command “Restart-Service ntds -Force”repadmin /syncall /AePdq  

Azure Force Tunneling – do not forget about this if you want to enable

$LocalGateway = Get-AzLocalNetworkGateway -Name “DefaultSiteHQ” -ResourceGroupName “ForcedTunneling”$VirtualGateway = Get-AzVirtualNetworkGateway -Name “Gateway1” -ResourceGroupName “ForcedTunneling”Set-AzVirtualNetworkGatewayDefaultSite -GatewayDefaultSite $LocalGateway -VirtualNetworkGateway $VirtualGateway and finally add route table with 0.0.0.0/0 to Virtual Network Gateway.