We have a server that keeps posting numerous subsequent Event ID 537 errors. Below is the 537 showing the substatus code of 0xC0000133 indicates a time difference. Below the 537 are system logs that can be found on the server. These are present every 2 hours. I beleive the problems began once the server was upgraded to SP2.
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date:
Time:
User: NT AUTHORITY\SYSTEM
Computer: Server
Description:
Logon Failure:
Reason: An error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -
Status code: 0xC000006D
Substatus code: 0xC0000133
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.0.1
Source Port: 0
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date:
Time:
User: N/A
Computer: Server
Description:
The Windows Time Service entered the stopped state.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date:
Time:
User: N/A
Computer: Server
Description:
The Windows Time Service terminated with the following error:
%%2