If a Windows server uses 'Require NTLMv2 session security' it means anonymous NTLMSSP results in NT_STATUS_NOT_SUPPORTED. It means winbindd is not able to talk to such a dc as it always tries to open an smb connection to ipc$ even if it only uses ncacn_ip_tcp.
This bug was referenced in samba master: c63880a1ec3e930dca1a511f4610a94483418e01
This bug was referenced in samba v4-24-test: 11bb0401497dac6c79e4c8e7c8d565648cf2a0a9
This bug was referenced in samba v4-24-stable (Release samba-4.24.2): 11bb0401497dac6c79e4c8e7c8d565648cf2a0a9
This bug was referenced in samba v4-23-test: 16d92be99eb242d7638c02454c9f24c940ff0d55
This bug was referenced in samba v4-23-stable (Release samba-4.23.9): 16d92be99eb242d7638c02454c9f24c940ff0d55
This bug was referenced in samba master: 23d1cab67b1c6f7d3cc4ead0d7a88ae809876001
This bug was referenced in samba v4-24-test: bac191f781193c011c8d201bcd8ed0d87a73c21d
This bug was referenced in samba v4-24-stable (Release samba-4.24.4): bac191f781193c011c8d201bcd8ed0d87a73c21d
This bug was referenced in samba v4-23-test: 29c355819a4e38970b637b6c51d7aa6c7e802180
This bug was referenced in samba v4-23-stable (Release samba-4.23.11): 29c355819a4e38970b637b6c51d7aa6c7e802180