Also, just noticed. Onboard audio is not working. USB headsets work fine.
Figured it out, there was a GPO setting: "Disable new DMA devices when this computer is locked". Here's a more detailed description on the Microsoft site: Windows 10 Enterprise 1709 driver issues when the machine joined the domain