What problems might arise within a domain when the member servers are not properly time-sync'd? I'm aware that log entries are incorrect making troubleshooting more difficult in time-sensitive operations. But would there be other symptoms, perhaps between file servers, authentication and certificate servers, would manifest themselves?
2 Answers
Kerberos tickets granted for authentication are very time sensitive and the mechanism breaks down absent accurate time sync between clients, servers and ticket grantors.
-
2We've definitely had problems with "no logon servers available" type of exceptions on those servers I've found were not synchronized. May 28, 2015 at 20:13
Many authentication protocols check for time skew. Kerberos (AD Auth) being a notable one.
-
Don't forget time-based OTPs.– user186340May 28, 2015 at 21:52