Link to home
Start Free TrialLog in
Avatar of jomfra
jomfra

asked on

clients cannot log in because time out restrictions

hello expert,

i have a dell poweredge 2300 os windows nt server sp6(P.D.C)
another server with the same  os acts as my .B.D.C
recently clients have reported peoblems login on around 12.00-12.30 p.m(day time)
during normal working hours
the message report is
cannot log you on at this time because of time restrictions.
i have check ,recheck  account parameters for all my clients
and the parameters set meets the requirements for a trouble free log in
i cannot seem to find a reason why this is occuring
Please could someone provide assistance
thank
Avatar of tonyteri
tonyteri
Flag of United States of America image

Check the Group (in Active Directory), that they are asigned to.  If there individual account does not have time restrictions, perhaps the group does.

/TT
Avatar of Sorenson
Check this link to be sure that the logon hours are correctly configured for the users.  http://www.microsoft.com/technet/archive/winntas/deploy/confeat/05wntpce.mspx?mfr=true
When the users are not permitted to logon, what events show in the security event log, check both pdc and bdc for events.
Avatar of jomfra
jomfra

ASKER

hellp experts
i discover sometime that my explain the problem
all my accounts are set to allow logon in between
8.00 to 6.00 p.m mon -friday (expect admin etc)
saturday and sunday no logins
i check the time and date this morning on
the p.d.c date  showing 9 june 2006
but the b.d.c was showing 11 jun 2006 ( sunday)
could this be the problem? and if
can someone explain why if the p.d.c and b.d.c date and time are diff will
the clients rec the above message.
Does a p.d.c and b.d.c share logon request ?
thanks
PDC and BDC will both process logon requests.  Depending on who responds first.  on the BDC, check that the timezone is set correctly (double click on clock on bottom right of the screen).  If it is correct, then goto a dos window and type "net time \\pdcname /SET"  (pdcname=your pdc name).  This will syncronize the two.  You may want to consider adding the command to your logon scripts.  In an NT domain environment, it is the best way to keep workstation clocks syncronized.  (net time \\pdcname /SET /Y).
Avatar of jomfra

ASKER

hello
where input this command (net time \\pdcname /SET /Y)
at the p.d.c or b.d.c
thanks
ASKER CERTIFIED SOLUTION
Avatar of Sorenson
Sorenson
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jomfra

ASKER

hello expert
thanks max pionts a award
thank you prompt response