Why can't I log into a Windows 2012 domain?

Question

Microsoft

Hello,
there are 2 offices, in office 1 there is a Windows 2012r2 domain, AD and DNS are raised on it, users can enter the domain, everything is fine, there is office No. 2 with office No. 1, it is connected by a VPN channel, users after moving from the first to the second entered to the domain. An incomprehensible problem has come (after 2-3 months) users cannot log into the domain, a black screen appears when entering the password and nothing else. There are a couple of computers that enter the domain. I can’t understand what the problem is, VPN is up, pings go to AD, nslookup returns the DNS ip address. Please help. I post listings from the dcdiag /dnsall and nslookup commands. AD address 10.8.0.15 read controller address 10.8.0.4
Listings from all AD servers
ad (10.8.0.4) https://pastebin.com/SiJgYYew
AD (192.168.1.16)https://pastebin.com/7hUivsrt
RodcAD (10.8.0.15) https://pastebin.com/XGPGQxnZ
Checking a secure channel from a computer under which I can’t enter the domain, logged in under the local admin https://pastebin.com/f3ZLCCJg

Errors of this kind

Answer 1

Start replication manually on the side of the office 2
repadmin /syncall
Your synchronization did not take place on time, by the way, check the time on the servers just in case.

Answer 2

I checked the time, the same for everyone (..

Answer 3

The problem is most likely in the routing part.