Microsoft KB Archive/232386

= Cannot Log On If Time and Date Are Not Synchronized =

Article ID: 232386

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q232386



SYMPTOMS
When you attempt to log on to the network, you may receive the following error message:

The system cannot log you on due to the following error:

There is a time difference between the Client and Server.

Please try again or consult your system administrator.



CAUSE
This behavior can occur if the time or date is not synchronized between your computer and the domain to which you are attempting to log on. If the client computer's time or date is not synchronized with the authenticating domain controller, Kerberos validation does not succeed. This occurs because of the variation in the time stamps between the AS_Req and AS_reply between the client and server. Because Kerberos is the only form of logon authentication between two Windows 2000-based computers, the logon does not succeed.



RESOLUTION
To resolve this issue, log on to your computer locally using an account with administrative privileges and set the time and date to match the time and date on the domain controller that validates your logon. Below is list of steps that can be used to synchronize the time.

Click Start, Run

Type in CMD and click OK

At the command prompt type something similar to the following:NET TIME /DOMAIN:name /SET

Where "name" is the domain name being used by the computer. If you are not certain what the domain name should be replace name with "%userdomain%" without the quotes.



MORE INFORMATION
Keywords: kbenv kbnetwork kbprb KB232386

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.