Access Denied errors reported after adding a server to an Active Directory domain [ID: 82136]


Product		Kodak^® Prinergy^® (all versions) running in an Active Directory domain
Operating system		Microsoft^® Windows^® 2000, Windows 2003, Windows XP

Error		The `Access Denied` error messages will differ. One error message may refer to `clock skew`.

Symptoms		Symptoms will be varied, but all will report an `Access Denied` error message. One symptom is the inability to add JTPs in Prinergy.

Cause		There is a difference between the system times (clock skew) on a Windows server and the associated Domain Controller. Kerberos authentication (which is what an Active Directory domain uses) requires that the difference in system clock time of any computer and the associated domain controller be no more than five minutes. If the time difference is more than five minutes, authentication will fail, even if you enter the correct user name and password.

Solution		Synchronize the clocks on all servers in an Active Directory domain with the clock of the primary Domain Controller.

Keywords		support, Windows 2000, Windows 2003, Windows XP

Technical contact		Robyn Lundstrom
Submitted by		Robyn Lundstrom
Date submitted		10 Dec 2007