Kerberos authentication fails if time drifts too far off and you lose access to network resources, such as shares. The tolerance for time drift varies with server editions. I think Server 2003 had a 5 minute drift tolerance and I think Server 2008 has a 10-minute tolerance.
Best regards, Michael Merker Director of Technology Infrastructure Voice (561) 868-3252 Fax (561) 868-3259 [email protected] Palm Beach State College 4200 Congress Avenue Lake Worth, FL 33461 Please note: Palm Beach State College e-mail addresses have changed. Please update your address book to reflect the new domain name for all College faculty and staff e-mail addresses: palmbeachstate.edu. Example: OLD: [email protected]<mailto:[email protected]> NEW: [email protected]<mailto:[email protected]>. My new address is [email protected]<mailto:[email protected]>. -----Original Message----- From: Kurt Buff [mailto:[email protected]] Sent: Monday, January 14, 2013 4:13 PM To: NT System Admin Issues Subject: Re: Time sync issues On Mon, Jan 14, 2013 at 12:49 PM, <[email protected]> wrote: > Quick brainstorm required....what's the most common issues you'd expect in a > Windows/AD environment if some servers have incorrect time settings? > Obviously AD replication and logging inconsistencies spring to mind...just > looking for a few to flesh out a blog post that deals with preventing admins > from changing the system time. > > TIA, > > > JRR Anything that demands tight control on time - what springs to mind immediately is higher volume database updates, where tampering with the time on the machine, especially moving the clock backward, can really fubar things. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin Please note: Due to Florida’s broad open records law, most written communication to or from College employees is public record, available to the public and the media upon request. Therefore, this e-mail communication may be subject to public disclosure. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
