TimeZone difference 1

[mayh3m]

Hi Everyone

We have created a Active Directory trust with one of our smaller companies. They are in a different timezone to us (1 Hour behind)
The trust worked, but when you try to connect to them, or pull users etc you get errors about the time being skewed.
Is there something that needs to be done to correct this?
We get the following errors when trying to pull their users:

The Security System detected an authentication error for the server ldap/servername.domain.name/domain.name@domain.name. The failure code from authentication protocol Kerberos was "The time at the Primary Domain Controller is different than the time at the Backup Domain Controller or member server by too large an amount.

(0xc0000133)".


Your help is appreciated

 

[PScottC]

Check all the systems and ensure that they are set for the correct time zone. Then ensure that the 2 domains (servers with PDC Emulator role) are using the same time source.

Behind the scenes in Windows, everything related to time is done in UTC. The time is then converted for your convenience according to the local time zone that you specify. So, having DC's on different time zones is not a problem, but if their clocks are more than 5 minutes off, then you get errors like the one you are asking about.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers