Windows services provisioning tasks fail in POA with the error message 'Provisioning request failed. A security package specific error occurred.' like in the example below:
Task name Set properties for AD entity 'w00100539' of type 'UserAccount' (entity_id: 735) Last execution output Destination host_id #67 : Provisioning request failed. A security package specific error occurred. 
This error is returned on one of the steps of Windows provisioning scheme, so general troubleshooting steps apply to it.
One of the reasons of the problem is different time on Active Directory (AD) Domain Controllers. If time difference on domain controllers is more than 5 minutes Active Directory related operations will fail in POA.
In case of time desynchronization:
Synchronize time on AD domain controllers and configure them to synchronize time from a single source.
Refer to the official Microsoft documentation for instructions, e.g.:
In case no time desync is observed and this is limited to a few tasks - troubleshoot according to guide on MSDN.