Kerberos time problem with 2 servers

  • Thread starter Thread starter Jonas P?rtma
  • Start date Start date
J

Jonas P?rtma

I installed a second W2kSP4 server into our AD domain and everything
is fine for a day. Then \\server2 no longer accepts logins.

I traced it to a time difference, kerberos won't allow more then 5
minutes difference.

I do not know how to get \\server2 to sync with \\server1 let's say
every hour.

Any help will be appriciated.

Thanks!

/Jonas Pärtma
 
They should automatically. Was the second server imaged before dcpromo? If
so the adj value in the registry maybe the cause of the time difference
 
No it wasn't imaged. This adj value, what is it? Where in the registry
can I find it? What should the value be? It's all new to me.


Richard McCall said:
They should automatically. Was the second server imaged before dcpromo? If
so the adj value in the registry maybe the cause of the time difference

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Jonas P?rtma said:
I installed a second W2kSP4 server into our AD domain and everything
is fine for a day. Then \\server2 no longer accepts logins.

I traced it to a time difference, kerberos won't allow more then 5
minutes difference.

I do not know how to get \\server2 to sync with \\server1 let's say
every hour.

Any help will be appriciated.

Thanks!

/Jonas Pärtma
Click to expand...
Click to expand...
 
321290 Clients May Not Synchronize Time Correctly After Hardware Changes on
http://support.microsoft.com/?id=321290
297025 Time Synchronization May Not Work Properly on Domain Controllers on
the
http://support.microsoft.com/?id=297025
--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Jonas P?rtma said:
No it wasn't imaged. This adj value, what is it? Where in the registry
can I find it? What should the value be? It's all new to me.


"Richard McCall [MSFT]" <[email protected]> wrote in message
They should automatically. Was the second server imaged before dcpromo? If
so the adj value in the registry maybe the cause of the time difference

--
Richard McCall [MSFT]

"This posting is provided "AS IS" with no warranties, and confers no
rights."
Jonas P?rtma said:
I installed a second W2kSP4 server into our AD domain and everything
is fine for a day. Then \\server2 no longer accepts logins.

I traced it to a time difference, kerberos won't allow more then 5
minutes difference.

I do not know how to get \\server2 to sync with \\server1 let's say
every hour.

Any help will be appriciated.

Thanks!

/Jonas Pärtma
Click to expand...
Click to expand...
Click to expand...
 
Back
Top