Logon problems - Time difference

[cshrhubarb]

We have 3 DCs all with 2k advanced server. We can not log on to one of them because it gives us the following logon error:

The system can not log you on due to the following error:
There is a time difference between the client and server.

We've tried the following things:
*using the net time commands to get all the times the same.
*changing the time in bios
*reinstalling windows

We tried some other minor things, but all produce the same error when we try to log on. We can log in using safe mode with network support. We have noticed that no matter what we do, the time is always 5 minutes fast.

Any ideas would be great. Thanks!

 

[GREENCELERY]

Set your global catalog DC to sync with an external Time Server and then make sure your remianing dc's are syncing with the global catalog server. Use net time /query I think to check there time source. You must open a port(sntp 123) on your router to point to the global catalog dc server in order to sync. Also, enable logging in your registry to show when the global catalog dc is successfully syncing with the external time server.