Kerberos authentication fails if time drifts too far off and you lose access to network resources, such as shares. The tolerance for time drift varies with server editions. I think Server 2003 had a 5 minute drift tolerance and I think Server 2008 has a 10-minute tolerance.
Best regards, Michael Merker Director of Technology Infrastructure Voice (561) 868-3252 Fax (561) 868-3259 merk...@palmbeachstate.edu Palm Beach State College 4200 Congress Avenue Lake Worth, FL 33461 Please note: Palm Beach State College e-mail addresses have changed. Please update your address book to reflect the new domain name for all College faculty and staff e-mail addresses: palmbeachstate.edu. Example: OLD: smi...@pbcc.edu<mailto:smi...@pbcc.edu> NEW: smi...@palmbeachstate.edu<mailto:smi...@palmbeachstate.edu>. My new address is merk...@palmbeachstate.edu<mailto:mmerk...@palmbeachstate.edu>. -----Original Message----- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, January 14, 2013 4:13 PM To: NT System Admin Issues Subject: Re: Time sync issues On Mon, Jan 14, 2013 at 12:49 PM, <kz2...@googlemail.com> wrote: > Quick brainstorm required....what's the most common issues you'd expect in a > Windows/AD environment if some servers have incorrect time settings? > Obviously AD replication and logging inconsistencies spring to mind...just > looking for a few to flesh out a blog post that deals with preventing admins > from changing the system time. > > TIA, > > > JRR Anything that demands tight control on time - what springs to mind immediately is higher volume database updates, where tampering with the time on the machine, especially moving the clock backward, can really fubar things. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin Please note: Due to Florida’s broad open records law, most written communication to or from College employees is public record, available to the public and the media upon request. Therefore, this e-mail communication may be subject to public disclosure. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
