Communication to and from the agent may at times use the Admin$ and C$ shares over Server Message Block (SMB) Protocol and can be locked down by GPO.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to on
By default the above GPO is off.
Microsoft network server: Server SPN target name validation level is set to ON in the GPO
Setting this GPO to:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to OFF
Resolves the issue for Ghost agent communication.