Time Difference in Client\Server

Active Directory is configured so that clients and the AD server MUST be within 5 minutes of each other. This means if your server has a system time of 8:03PM, and your workstation has a system time of 7:57PM, then you will NOT be able to log in from that workstation.

You need to sync up the workstations with the time on the server to avoid this.

There are a few ways you can do this properly. One way is to run the following on your workstations:

NET TIME \\DOMAINCONTROLLERNAME /SET /Y
Put in the machine name of your Win2k server after the \\. That will sync up the clock on the workstation with the server. You could then put that line in the logon scripts to keep the clocks synchronized.

hope this helps

Or you can type in the run command of the domain controller the following: net time /setsntp:DHCP

Replace DHCP with the netbios name of your domain controller, i.e, SVR01, or SVRO2. This means that everytime your workstation would log in, the server would impose its time on the workstation.

You may want to check that the W32Time service (Control Panel, Administrative Tools, Services -> Windows Time) is running on both the server and workstation.

S.