Re: cannot generate SSPI context - time out at client

Time synchronization is usually done by the Windows Time Service. By
default, time synchronization is done using the standard AD hierarchy.
Clients and member servers get their time from a domain controller in their
domain. Domain controllers get their time from a domain controller in their
parent domain. Forrest root domain controllers are ultimately used as the
time source and use either a hardware clock or NTP source.

> How can i synch the time bet the client & the server ?

One method to resync the time is with the w32tm.exe: w32tm.exe /resync

Another method is with the NET TIME command: NET TIME /DOMAIN:MyDomain /SET

> and prevent it from happening again

See the TechNet article below for a discussion of the Windows Time Service:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/a0fcd250-e5f7-41b3-b0e8-240f8236e210.mspx


--
Happy Holidays

Dan Guzman
SQL Server MVP

"maxzsim via SQLMonster.com" <u14644@uwe> wrote in message
news:599906d9830e0@xxxxxx
> Hi ,
>
> My client has once again got the "cannot generate SSPI context" error and
> this time i managed to notice that the time on the client is abt 20 mins
> earlier than that of the server.
>
> How can i synch the time bet the client & the server ? and prevent it from
> happening again
>
> apreciate ur advise
>
> tks & rdgs
>
> --
> Message posted via SQLMonster.com
> http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-security/200512/1


.

Relevant Pages

  • Re: Client performance problem windows 2003 server...
    ... there and install an english client to be doing the errorsearching on. ... to the Windows 2000 server in site A that is a English ... >>be a DNS replication issue. ... >>results from not having a domain controller in a particular site. ...
    (microsoft.public.windows.server.networking)
  • Site-tosite VPN Issue
    ... Windows Server 2003 domain controller ... Mixture of PCs running Windows 2000 Profressional with SP3 and Windows XP ... the VPN to the Windows Server 2003 domain controller. ... 12.7MB file from the server to the client PC. ...
    (microsoft.public.windows.server.networking)
  • Re: Kerberos Error Message
    ... the domain controller which you reboot to alleviate the problem? ... > I know for certain there is no time difference between client and server. ... >> A good resource for troubleshooting Kerberos errors is the relatively new ...
    (microsoft.public.win2000.security)
  • Re: NTP in Win 2003 domains (awaiting response of my previous post)
    ... The purpose of the Windows Time service is to make sure that all computers that are running Microsoft Windows 2000 or later versions in an organization use a common time. ... All domain controllers in a domain nominate the primary domain controller operations master as their in-bound time partner. ... When you configure the authoritative time server to sync with an Internet time source, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Multiple Domain Controllers -- who takes over if one is down?
    ... ....If domain controller fails client may need to reboot their computer... ... We know this is the case right now and it works, so if a client reports ... > * Make sure that you have at least two servers with global catalogs role ... If only one is assigned this role and this server goes down, ...
    (microsoft.public.windows.server.general)