Kerberos Security - How to switch off

From: Lee Steventon (lsteventon@hotmail.com)
Date: 07/30/02 

From: "Lee Steventon" <lsteventon@hotmail.com>
Date: Tue, 30 Jul 2002 03:59:07 -0700

Hi,

We are trying to perform some "timeshift" testing in our
organization which requires us to change the date and time
on a local PC within an AD. This is necessary as we need
to see the effects on customer accounts when the date is
rolled forward (anywhere up to 10 years). When we roll
back the date and attempt to log back on with the same
domain account, we are locked out because of changes made
to the Active Directory in "the future".

Is this Kerberos locking us down because of the timestamp
on the account and if so, how can we "disable" kerberos ?

Kindest Regards

Relevant Pages

  • Re: Does anyone know how to fix this??
    ... > Inside the Active Directory Users and Computers in the folder of SYSTEM I ... Give the site's SMS Service account full control rights to the ... MP encountered an error when connecting to SQL Server. ...
    (microsoft.public.sms.setup)
  • Re: Cross-Domain question (Parent - Child)
    ... computer accounts unless logged in directly to the server? ... different DC so the DC you are looking at doesn't get the audit entries. ... Author of O'Reilly Active Directory Third Edition ... User Account Created: ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain troubles
    ... Workgroup administrative environment and the machine account in Active ... Another possiblity is that the Active Directory DNS cannot resolve the ... For example if you built a network segment and abitrarily choose ...
    (microsoft.public.windows.server.general)
  • Re: NTDS Replication Event ID 1083/1955 and account lockouts
    ... Active Directory could not update the following object with changes received ... from the domain controller at the following network address because Active ... Not sure if the event is ocurring after the account has been locked or the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Does anyone know how to fix this??
    ... Inside the Active Directory Users and Computers in the folder of SYSTEM I ... > Basically sms secondary site reports me 3 kind of error.... ... > account may not have full control rights for the "System Management" ... > "System Management" container, and all child objects in Active Directory. ...
    (microsoft.public.sms.setup)
Quantcast