Please fill in the following information:

Issue description

In the Enter string value text box, enter the name of the domain against which to authenticate, including the preceding dot (.) character. For multiple domains, enter them in a comma-separated list.

the instructor in the video says: it needs to end with the trailing dot.

I would believe the text is leading. 

Then perhaps add an example.

If we take it literally, it would be .example.com, .lab.example.com

I then would intuitively assume that the DNS resolves that address to the KDC? 

Steps to reproduce:

Workaround:

Expected result: