Can users log on to a domain when a system clock is desynchronized?

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Archive: Windows Desktop Management Can I change network settings on the fly? How FAT and NFTS differ SMS installer won't work with 64-bit Vista's HKLM Registry key Use RoboCopy to copy files from crashed hard disk drives Give domain users permission to do disk defragmentation locally How can I restore a disabled Administrator account? Add domain group to local admins group on XP workstations at one time Why does Explorer crash so frequently? I lost my Windows XP product key Rename multiple computers programmatically

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

It is in general not a good idea to have any machine whose clock is out of sync, even deliberately. There are several reasons for this, one of which is that the authentication of security certificates -- some of which are created at install time -- are tracked through the system clock. If the system clock is heavily desynchronized, then certain security verifications become impossible because the computer has no idea if any of its root certificates are still valid. This is by design.