Symptoms
Windows services provisioning tasks fail in POA with the error message 'Provisioning request failed. A security package specific error occurred.' like in the example below:
Task name Set properties for AD entity 'w00100539' of type 'UserAccount' (entity_id: 735)
Last execution output Destination host_id #67 : Provisioning request failed. A security package specific error occurred. []
Cause
This error is returned on one of the steps of Windows provisioning scheme, so general troubleshooting steps apply to it.
One of the reasons of the problem is different time on Active Directory (AD) Domain Controllers. If time difference on domain controllers is more than 5 minutes Active Directory related operations will fail in POA.
Resolution
Trace the request using WPE Request Tracer Tool or MPF traceview and investigate the issue depending on what layer of provisioning the error is returned.
In case of time desynchronization:
Synchronize time on AD domain controllers and configure them to synchronize time from a single source.
Refer to the official Microsoft documentation for instructions, e.g.:
How to configure an authoritative time server in Windows Server
In case no time desync is observed and this is limited to a few tasks - troubleshoot according to guide on MSDN.