Why don't you join the domain with the template VM Windows and then try the full clone deployment again?

I do not use sysprep when verifying.
Because if the clone fails with sysprep I need to consult with Microsoft.

Maybe it's the full clone flow allocation setup you want to make, is that correct?