Login Error (there is a time and or date difference between the client)

shybrsky

this morning ..some of user tried to login on their computer with domain user and got this message ..

anyone know this issue ?? or how to solve this ..

Regards
Shyb

scottalanmiller

Did you check the time on the server and on the clients? It has to be very close, like within five minutes or Kerberos (AD) will fail.

shybrsky

@scottalanmiller i did ... make changes .. and same problem ... tolerance only 5 minutes right ??

scottalanmiller

@shybrsky said:

@scottalanmiller i did ... make changes .. and same problem ... tolerance only 5 minutes right ??

At most. You want it within a few seconds, though. If it is more than say fifteen seconds off, something is wrong.

nadnerB

Well, just to make sure it's not the time, you can try this so long as you can actually log into the machine... a local account will do fine.

From an elevated command prompt:

net time /domain:<insert domain here> /set /y

nadnerB

Also, have a go at these things here before going on with the steps below :

Personally, I haven't ever had any of them work (even though I try them first) so I always have to fall back to:

disconnect PC from domain (reboot etc)
remove entry from AD
Connect PC to domain
move to correct OU
```
gpupdate /force
```

shybrsky

thankx any feeedback ... solved

scottalanmiller

Great! Another case closed by the late night ML team.