Time -date server

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

I would like to know if it's possible to log in a user in
a computer not synchronous with the domain controller its
time server.

For instance domain controller 19/02/05 -server 05/01/05
that difference is valid between them

Thanks any comments

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"misaro" <anonymous@discussions.microsoft.com> wrote in message
news:033601c516ac$2cfcacf0$a501280a@phx.gbl...
>
> I would like to know if it's possible to log in a user in
> a computer not synchronous with the domain controller its
> time server.
>
> For instance domain controller 19/02/05 -server 05/01/05
> that difference is valid between them

Anything greater than a 15 minute difference breaks Kerberos.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"misaro" <anonymous@discussions.microsoft.com> wrote in message
news:033601c516ac$2cfcacf0$a501280a@phx.gbl...
>
> I would like to know if it's possible to log in a user in
> a computer not synchronous with the domain controller its
> time server.
>
> For instance domain controller 19/02/05 -server 05/01/05
> that difference is valid between them

You could try allowing/forcing NTLM, but
why not just fix the TIME?

It's easy to do through many mechanisms.

Be sure to also set the Time zone properly to
both match and show correct local time to users.

--
Herb Martin


>
> Thanks any comments

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Doug,

That would actually be five minutes, by default!

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Doug Frisk" <PublicNews@removeme.fazwak.com> wrote in message
news:OyK2KHrFFHA.3244@TK2MSFTNGP15.phx.gbl...
> "misaro" <anonymous@discussions.microsoft.com> wrote in message
> news:033601c516ac$2cfcacf0$a501280a@phx.gbl...
>>
>> I would like to know if it's possible to log in a user in
>> a computer not synchronous with the domain controller its
>> time server.
>>
>> For instance domain controller 19/02/05 -server 05/01/05
>> that difference is valid between them
>
> Anything greater than a 15 minute difference breaks Kerberos.
>