# RCA: Ticket 2417
**Summary:** Authentication failures for 12 users.
**Root Cause:** Internal DNS forwarder returned stale records for domain controllers.
**Action Taken:** Corrected forwarder IP, flushed DNS caches, validated sign-in.
**Lessons Learned:** Add DNS forwarder monitoring and automated cache flush on DC failover.