Solved

Changing the date/time on Windows 2003 member server!

Posted on 2004-09-06
8
306 Views
Last Modified: 2010-04-19
Hello,

I am currently designing a 2003 Active Directory infrastructure and I have the following potential issue.

I will have some member servers in the Domain that will run SQL and other apps that Testers\Developers will want me to change the time and date on, to test triggered date and time events.

As far as I understand the time on a member server is synchronised with a DC and each DC is sync'd with the PDC emulator.

I believe that the Windows Time Service (W32Time) can be stopped on a server to prevent a it synchronising its time.  However I am worried this will cause problems as kerberos works on a time being correct.

My question is:-

If I change the date and time on member (with SQL), without changing the rest of the domain will it still be able to service requests from clients with the correct time?

Thanks
0
Comment
Question by:gnfreeman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 23

Expert Comment

by:rhandels
ID: 11989137
Hi,

My two cents.. If this is a production server, don't change the time. I do know that syncing the AD will go wrong and a lot of other stuff also goes wrong. I do beleive there must be a time differnce of a maximum of 10 minutes, else sync doesn't work. So my guess is that it won't work, servicing request.

0
 

Author Comment

by:gnfreeman
ID: 11989153
If that is the case I would need a seperate forest/domain for a Test/Dev environment?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 11989244
I always isolate test/development environments from the main network - usually as far as firewalling it off from production. I don't trust developers and will not allow them to change anything as key as the time on a production domain.

You are looking at two solutions.

1. Physical seperate test/development domain.
2. Virtual test/development domain - using something like VMWARE.

Remember that these two domains cannot have a trust either - as the time difference will also break that.

Simon.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 23

Expert Comment

by:rhandels
ID: 11989266
I Agree with SImon about the test domain... Always try to have one, it's very important. specially if something fails..
0
 

Author Comment

by:gnfreeman
ID: 11989270
Your comments are much appreciated.
Is the date/time issue definately a problem with the trusts as well?
0
 
LVL 23

Expert Comment

by:rhandels
ID: 11989288
I'm not quite sure, maybe Simon is aware of this problem. Only thing i know is not to do this within a working environment...
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 200 total points
ID: 11989428
I believe trusts use Keberos authentication, which means if the time is out by more than five minutes the trusts break.
I have been there and seen it with my own eyes. Get the clocks in sync and everything is fine.

Simon.
0
 
LVL 23

Accepted Solution

by:
rhandels earned 300 total points
ID: 11989478
>>I believe trusts use Keberos authentication<<

If you use 2003 with forest trust or two way trusts, i'm 100% sure it uses Kerberos authentication.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question