Solved

Changing the date/time on Windows 2003 member server!

Posted on 2004-09-06
8
307 Views
Last Modified: 2010-04-19
Hello,

I am currently designing a 2003 Active Directory infrastructure and I have the following potential issue.

I will have some member servers in the Domain that will run SQL and other apps that Testers\Developers will want me to change the time and date on, to test triggered date and time events.

As far as I understand the time on a member server is synchronised with a DC and each DC is sync'd with the PDC emulator.

I believe that the Windows Time Service (W32Time) can be stopped on a server to prevent a it synchronising its time.  However I am worried this will cause problems as kerberos works on a time being correct.

My question is:-

If I change the date and time on member (with SQL), without changing the rest of the domain will it still be able to service requests from clients with the correct time?

Thanks
0
Comment
Question by:gnfreeman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 11989137
Hi,

My two cents.. If this is a production server, don't change the time. I do know that syncing the AD will go wrong and a lot of other stuff also goes wrong. I do beleive there must be a time differnce of a maximum of 10 minutes, else sync doesn't work. So my guess is that it won't work, servicing request.

0
 

Author Comment

by:gnfreeman
ID: 11989153
If that is the case I would need a seperate forest/domain for a Test/Dev environment?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 11989244
I always isolate test/development environments from the main network - usually as far as firewalling it off from production. I don't trust developers and will not allow them to change anything as key as the time on a production domain.

You are looking at two solutions.

1. Physical seperate test/development domain.
2. Virtual test/development domain - using something like VMWARE.

Remember that these two domains cannot have a trust either - as the time difference will also break that.

Simon.
0
The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

 
LVL 23

Expert Comment

by:rhandels
ID: 11989266
I Agree with SImon about the test domain... Always try to have one, it's very important. specially if something fails..
0
 

Author Comment

by:gnfreeman
ID: 11989270
Your comments are much appreciated.
Is the date/time issue definately a problem with the trusts as well?
0
 
LVL 23

Expert Comment

by:rhandels
ID: 11989288
I'm not quite sure, maybe Simon is aware of this problem. Only thing i know is not to do this within a working environment...
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 200 total points
ID: 11989428
I believe trusts use Keberos authentication, which means if the time is out by more than five minutes the trusts break.
I have been there and seen it with my own eyes. Get the clocks in sync and everything is fine.

Simon.
0
 
LVL 23

Accepted Solution

by:
rhandels earned 300 total points
ID: 11989478
>>I believe trusts use Keberos authentication<<

If you use 2003 with forest trust or two way trusts, i'm 100% sure it uses Kerberos authentication.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question