I suspect you are running into a certificate issue where you have self signed certificates in the Trusted Root that need to be removed.  Check out this blog post.
 https://getfishtank.ca/en/blog/sitecore-9-xconnect-status-403-forbidden-certificate-error

The main point if the post is to remove the non-self signed certificates in your root.

    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} 

This will list you certificates that need to be removed.  This command should return no results, if everything is OK.

Now you need to remove them. The following powershell will remove the offending certificates.

    Get-Childitem cert:\LocalMachine\root -Recurse | Where-Object {$_.Issuer -ne $_.Subject} | Move-Item -Destination Cert:\LocalMachine\CA