After upgrading your PRIMARY appliance and allowing replication to upgrade your REPLICA appliance and then your NON FAILOVER REPLICA (NFR) appliance, users cannot login to the NFR when testing the appliance in PRIMARY mode.
Replication failed to upgrade all the necessary files. There are no apparent failures in the logs.
To confirm this is the issue, please perform the following test steps:
Set an AD users primary authentication to LOCAL and their secondary authentication to "WinAD".
Test logon using the local password first, the user should be prompted for their WinAD password. This should succeed.
If the above test succeeds and allows access then it would be required that a TPAM administrator perform a full upgrade of 2.4.<buildnumber> on the NFR appliance.
If your WinAD login still fails, please contact support for further analysis.