I have a Cisco C9300-24P layer 2 switch with a dozen computers and 2 servers on the same VLAN, all statically set with no default gateway as there is no router and all offline from the internet. The servers are DCs and see the domain as DOMAIN.NET. These are all fresh installs of windows. The computers see the network as "unidentified network". I have this same setup on an HP switch and those machines see the domain as DOMAIN.NET. So my question is can a Cisco switch config prevent the clients from seeing the domain connection as a domain connection on Windows 10?
can a Cisco switch config prevent the clients from seeing the domain connection as a domain connection on Windows 10?
No, not normally. Windows NLA works by trying to establish certain connections with a domain controller. So, unless a switch actually filters those connections by ACLs, it doesn't interfere with NLA at all.
If the connections cannot be established, the usual causes are (mostly off-topic here) DNS problems (e.g. non-MS DNS) or firewall settings. Make sure the DCs allow all relevant protocols regardless of the apparent location/profile (in case you need to boot all of them at the same time) - and of course, never connect them to anything but the company LAN, and do not port-forward anything from the Internet.
After doing some research and some testing I stumbled across the answer. I had to enable Portfast with BPDU protection. After setting the ports to Portfast signals started working as they should. New security stance for configurations require Portfast to be enabled and we are using BPDU Guard to protect against cross connect and other settings.