Server date change on it's own?

[Scruby]

Some how the date was changed on my W2K server yesterday on it’s own, users could not logon they would receive an error message that the current time on the computer and the current time on the network was wrong. Has anyone ever seen this happen? And if someone did change the time is there a way to audit to find out who may have done this?

Thanks, Scruby

 

[kmcferrin]

Unless you had turned up the auditing level to include this before the date change, no.

How far off was the date/time diff?

Generally, the only people who would have the rights to change the date/time on the server would be server administrators/domain administrators. Although I suppose that it's possible that there was some other problem that caused the time change (for example, the time was changed on the NTP server that your server queries for the time).

 

[Ringers]

Maybe your system battery is low.

 

[Scruby]

kmcferrin, What auditing properties will I have to set?

Ringers, Where would I go to check the battery status, I have Compaq servers?

Thanks, Scruby