Non-privileged users are able to logon to a domain but the account with domain Admin Privileges errors with There is a time and/or date difference between the client and server. Same error displays after running net time and sync with the domain controller. The time and date settings match, and the client and server agree on the time.
The logon properties in Active Directory Users and Computers was set to Logon without Kerberos preauthentication.
Deselect the Logon without Kerberos preauthentication box in the logon properties in Active Directory Users and Computers for the Priveledged Domain login.