Access denied on network when time is different
Hi all, I have a Vista SP1 and a WinXp Sp2 box in a ' home' network and we're running a distributed app on them. If the time differencebetween the machines is more than 5 minutes, I'll get an 'access denied' when accessing a share on the XP box. I think this is caused by SP1 of Vista. I've read somewhere that Kerberos is now the default authentication protocol and Kerberos uses the time in it's protocol. Time synchronization on our distributed application worksby usingpipes instead of NTP so I can't use the standard mechanism to sync the time between the two machines. Does anyone knowhow to solve thisproblem? Best regards
November 14th, 2008 6:34pm

Hi, Thank you for posting. If you cannot use standard mechanism to sync time between the two machines, I suggest you use a third party tool to sync time. Such as: TimeSync http://ravib.com/timesync/ Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. In addition, hope the following links can help you. Internet Time Synchronization http://www.vistax64.com/tutorials/73040-internet-time-synchronization.html How to Change the Internet Time Synchronization Update Interval in Vista http://www.vistax64.com/tutorials/89800-internet-time-synchronization-update-interval.html Please Note: Since the web sites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information. Thanks.
Free Windows Admin Tool Kit Click here and download it now
November 18th, 2008 10:13am

Hi, As I mentioned in my post, we already have our own time synchronization implemented, so I don't need third party software. Back to the problem: if there is a time difference of more than 5 minutes between 2 pc's, I can't connect to a share. The share is on an XP SP2box and the connection is being made from Vista SP1 box. If I correctthe time manually, the connection can be made. Does anyone how to solve this?
November 19th, 2008 10:05pm

Hi, Thank you for your clarify. Before moving on, I would like to explain that Kerberos should not be exist in home environment. It is used for Active Directory. Given the situation, could you please enable Netmon on the computers to capture the network packets? I will do a further research on Access denied error message and try to find what causes the error. 1) Download NetMon3.2 from the following website and install it on the both computershttp://www.microsoft.com/downloads/details.aspx?FamilyID=f4db40af-1e08-4a21-a26b-ec2f4dc4190d&DisplayLang=en 2) Log onto the machines, right-click the Netmon icon and select Run as Administrator to launch NetMon3.2.3) In the Microsoft Network Monitor 3.2 window, click Create a new capture tab 4) In the new tab, select all the Network Adapters in the Select Networks window.5) After that, press F10 to start NetMon.Note: Please start NetMon on both machines. 6) Try to re-produce the problem on the computer. 7) Go back to the NetMon window and press F11 to stop the NetMon. 8) Press Ctrl+S to save the Netmon file and upload them to the following space: https://sftus.one.microsoft.com/choosetransfer.aspx?key=e057459c-0516-4ec1-a000-10249cba65f3 Password: Pn64aA[*J^79D8vz In addition, please understand that analyze/troubleshoot this kind of issue may be time consuming. If it is urgent, Id like to recommend that you contact Microsoft Customer Support Service for instant assistance. To obtain the phone numbers for specific technology request please take a look at the website listed below:http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS Thank you for your cooperation. Hope it helps.
Free Windows Admin Tool Kit Click here and download it now
November 20th, 2008 12:29pm

Hi Robinson, I finally had some time to work on this issue. I hope you're still willing to help me on this problem. The steps you've mentioned are completed and resulted into two capture files.server: XP SP2 containing the share is called serverside.capclient: Vista SP1 accessing the share is called clientside.cap When analyzing the logging you'll see this pattern:a ping command from client to servera 'net view' command resulting in an 'access denied' (the time on the XP box is more than 5 minutes different/behind from the vista box)<now the time on the XP box is corrected>a ping command from client to servera successful 'net view' commandThe workspace you've setup for me is expired I think. Can you enable/renew it again?Best regards,Geert Doornbos
January 12th, 2009 12:24pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics