Time Difference Exists Between the Client and the Server (297234)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
This article was previously published under Q297234
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

You cannot log on to the domain after installing the Enterprise User Monitoring component of SuperScout, a product of Surf Control.

When you attempt to log on to a domain, you may receive the following error message:
System cannot log you in due to the following error:

There is a time difference between the Client and Server.
The following error message may also be displayed:
Naming information cannot be located because the clocks on the client and server machines are skewed.

CAUSE

This behavior may occur if you install the Surf Control Enterprise User Monitor on the domain controller.

RESOLUTION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To resolve this behavior, remove the SuperScout product from your Active Directory domain controllers until the updated ScSubAuth.dll file is available from Surf Control.

If you are unable to log on to your network, restart your domain controller in Safe mode from a command prompt. To do so, press F8 when the computer starts to boot, and then choose Safe mode when a list of options is displayed.

To remove the SuperScout product:
  1. Start Registry Editor (Regedt32).
  2. Navigate to the following Registry key:

    HKLM\System\CCS\Control\LSA\Kerberos

  3. In the Kerberos key, on the right you will see a value of Auth0 = ScSubAuth. Click this value, and then on the Edit menu, click Delete.
  4. Repeat the previous step for the following registry key:

    HKLM\System\CCS\Control\LSA\MSV1_0

  5. After you remove these values, restart the computer and log on as usual.

MORE INFORMATION

The Surf Control knowledge base article for this particular issue with the Enterprise User Monitor product is located at the following Surf Scout Web site:

http://www.surfcontrol.com/support/kb_article.aspx?id=428

The third-party products that are discussed in this article are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.
Modification Type:MinorLast Reviewed:1/27/2006
Keywords:kb3rdparty kbenv kbprb KB297234
©2004 Microsoft Corporation. All rights reserved.