<div>
Sync them on a time server to solve the problem.<br />
<br />
<a href="http://support.microsoft.com/kb/830092" rel="ugc nofollow">http://support.microsoft.com/kb/830092</a><br />

</div>


Sync them on a time server to solve the problem.

http://support.microsoft.com/kb/830092 [http://support.microsoft.com/kb/830092]


<div>
Take a look at Jorge's 4 part blog post about windows time.<br />
<br />
<br />
<a href="http://blogs.dirteam.com/blogs/jorge/archive/2010/09/27/configuring-and-managing-the-windows-time-service-part-1.aspx" rel="ugc">http://blogs.dirteam.com/blogs/jorge/archive/2010/09/27/configuring-and-managing-the-windows-time-service-part-1.aspx</a>
</div>


Take a look at Jorge's 4 part blog post about windows time.


http://blogs.dirteam.com/blogs/jorge/archive/2010/09/27/configuring-and-managing-the-windows-time-service-part-1.aspx [http://blogs.dirteam.com/blogs/jorge/archive/2010/09/27/configuring-and-managing-the-windows-time-service-part-1.aspx]

<div>
<div class="content wysiwyg-content">
We have a Point-to-point with our colo and 2 active directory domains. &nbsp;The 2 domains are mostly in sync except for a few of our servers at our color have a time differential of about 2 and a half minutes. &nbsp;We've had a problem before where when the server times got too descynch'd we were unable to auth and get into the servers essentially locked out. &nbsp;<br />
<br />
What is the maximum time differential allowed?<br />
<br />
Is it configurable and if so, where?
</div>
</div>


We have a Point-to-point with our colo and 2 active directory domains.  The 2 domains are mostly in sync except for a few of our servers at our color have a time differential of about 2 and a half minutes.  We've had a problem before where when the server times got too descynch'd we were unable to auth and get into the servers essentially locked out.  

What is the maximum time differential allowed?

Is it configurable and if so, where?

Maximum Domain Time Difference Between Computers

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.