Welcome to MSDN Blogs Sign in | Join | Help

Synchronizing machine time with domain controller

Sometimes when joining a machine to a new domain, you might get an error saying "The time on your machine does not match with the network time". On getting this error while logging in, the machine will not allow you to log in to the domain. I just got this error today when setting up a new virtual machine for the environment. 

The basic issue here is that the time on the machine is not automatically synched with the time on the domain controller. (Not sure why this matters, great if somebody can clarify).

But anyways, to resolve this problem, simply login as a local account and sync the time with the domain controller using the Net time command.

To do this, goto the command prompt and run the following -

 

NET TIME /domain:mydomainname /SET /Y

 

This will synchronize the machine time to that of the domain controller. After doing this, you can simply log off and log on again with the domain user.

 

--Sanket

Published Thursday, November 02, 2006 10:30 AM by Sanket Bakshi
Filed under:

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

# re: Synchronizing machine time with domain controller

Thursday, November 02, 2006 5:48 AM by Rob

Time matters when logging into a Windows domain as Kerberos authentication uses time sensitive tickets to ensure that a security breach can't be achieved by someone sniffing the network, picking up credentials/other data and decrypting them at their leisure.

It's all a bit more complicated than that oversimplified, and slightly wrong (!?) explanation, but that's the jist of it.

# re: Synchronizing machine time with domain controller

Tuesday, December 05, 2006 2:40 PM by Raunchy Guitarist

Hi Sanket,

A slightly less-relevant counter-question to u: Do  u know how to ensure that your virtual machine timer is always keep correct time w.r.t to the host OS? I use VMWare to create my virtual machines. What about u?

# re: Synchronizing machine time with domain controller

Friday, May 15, 2009 5:07 PM by Alex

I fixed by just changing the local clock to the server time manually. I was off by a day, that's what caused the error.

Leave a Comment

(required) 
required 
(required) 

  
Enter Code Here: Required
 
Page view tracker