Authentication Server could not be contacted
I had the same problem. We have MACs on El Capitan to High Sierra and Win 2012 R2 as Domain controller. After a lot of trial and error, I found out that the AD user has to belong to  "Account Operator" security group, even if the user is Domain Admin or Enterprise Admin. We found this out after a lot of struggle. 

Hope this solution helps you.