Maybe this has been posted already but I didnt seem to find this anywhere. I have 10 remote sites with a DC in each location. Each DC is a GC. At my corp office I have the 1st DC and various other 2003 servers and an Exchange server. Each location is a differnet site. There is a different site link for each site pointed back to our DC at corporate. Everything seems fine except all of the remote DC's clocks are one hour behind the Domain Controller at corporate (yes the time zones are correct) and I have some DC's creating an automatically created connection with each other under NTDS settings. If I try to change the clock on each server I run into permission problems with any of my clients hitting any server but its own local server. I get the "permission denied, the local server has not synchronized its clock with the remote server" error message. Any ideas? I'm baffled.