You deployed Active Directory Gateway to use newly integrated Threat Defense for Active Directory in your Endpoint Security cloud console. However your endpoints stay with security status "At Risk" and security status reason as "Bad Credentials (Threat Defense for Active Directory)".
Endpoint Security with 14.3 ru4 Symantec Agents.
Issue solved in SEP 14.3 RU5.