AD and client time diffrence (Network Steve Forum)

AD and client time diffrence

Hello Guys, I need to know this information. I have to change my time zone for my clients. there are windows 2008 Active directlry. I need to know maximum time diffrence between that can keep with loging access. regards

January 21st, 2011 4:06am

by default Kerberos allows up to 5 minutes difference between client and domain controller.Regards, Krzysztof

Free Windows Admin Tool Kit Click here and download it now

January 21st, 2011 4:32am

To check that restricted policies check in Default Domain Policy under Computer Configuration -> Windows Security -> Security Settings -> Account Policies -> Kerberos Policy there you will find "Maximum tolerance for computer clock synchronization" policy which contains that value.Regards, Krzysztof

January 21st, 2011 4:51am

This topic is archived. No further replies will be accepted.