I have joined my Vista Ultimate build 5384 laptop to my domain. I can login as a non privledged user without issue. I fail on login with a privledged user with the following message "There is a time and/or date difference between the client and server." The system and client clocks are synchronised. I have activated windows and run all critical updates. I have searched and found this same question on a few forums/newsgroups but, no answers. thanks for your time.

I am in the same boat. I can confirm that non-privileged users are able to logon to a domain joined Vista box. And my account (with domain Admin Privileges) pops the same error "There is a time and/or date difference between the client and server" Only thing is when I use the actualdomain administrator account it will work without any problems. I guess the test would be to demote myself to normal user status and see if it works or not.

Ok so I've demoted myself to Domain User but still have the same problem at logon. It looks like the issue may not have all that much to do with Admin Privileges at all. I'm stumped as to what to try next.

Just to clarify, can both of you, Bengareth and RSchyns, log on to the domain as some users but not as other users not including the built-in Administrator account on the domain?

I also have the same issue: 2 accounts; 1 with domain admin priveledges, one without. both have local admin priveledges, the domain admin can logon, the "normal" user cannot. same error as the others. I ran net time and synced with the domain controller. the time and date sttings match, and they agree on the time.

resolved the issue. in my case, on the account tab of the user properties in Active directory Users and computers, logon without kerberos preauthentication was selected. I deslected this box, and was able to log on successfully.

I can confirm that the; "Do not require Kerberos preauthentication" option was ticked for the domain admin account I was having problems with. AND it was not tick for all the accounts that worked. I don't have a Vista Build to test and confirm this on, BUT I'd bet bottom dollar that this is the fix. Nice one!

I unchecked it and was able to logon. Some privileged users can logon with this box being checked. I can't find the difference between accounts. When I have it unchecked I can't logon to the domain using Cisco VPN client.

you will need to update you cisco client

you will need to update you cisco client

I have the same problem with Vista and the Cisco client. If I have checked 'do not require preauthentication' the users cannot logon to the domain but if I uncheck it they cannot logon with the Cisco vpn client. We are using the latest Cisco client and it doesn't work.

http://support.microsoft.com/kb/232386 I had this issue as well - login wihtout Kerberos was not an option. what was very odd is they gave the instructions to log in with a local admin account - which if you're managing computers on a large domain is very impractical. The net time command works quite well in my case - and it can be used remotely run a cmd window with admin rights then do the following commands: net time net time \\computer /DOMAIN:yourdomainname /set net time \\computer I do the first net time to check my local time, then the command to update the time on the computer and finally a net time on the computer to test it's time