We have a Point-to-point with our colo and 2 active directory domains. The 2 domains are mostly in sync except for a few of our servers at our color have a time differential of about 2 and a half minutes. We've had a problem before where when the server times got too descynch'd we were unable to auth and get into the servers essentially locked out.
What is the maximum time differential allowed?
Is it configurable and if so, where?