DMZ and other untrusted domain hosts will display an Access Denied state. They can't be re-associated; they will need to be removed and re-added to the VMM 2016 management.
