Hello gjl_support,

Nice to hear that you found it, thanks for posting the solution.

For domain time sync configure the DC with the PDCEmulator role to an external
time source:
w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update



With "PEERS" you can set the time source, either DNS name (time.windows.com)
or an ip address from a reliable time source.

Here you can find some of them:
http://www.pool.ntp.org/

At least on the servers i would run:
w32tm /config /syncfromflags:domhier /update

After that run:
net stop w32time
net start w32time

to make sure they are using the domain hierarchie for time sync. Seems something
is gone wrong. Also make sure that UDP port 123 is open on the machines,
needed for the time sync.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> The problem ended up being that this server and the DC's time were off
> by 3 minutes...
>
> Sync'd the clocks, problem solved.
>
> "Meinolf Weber [MVP-DS]" wrote:
>

>> Hello gjl_support,
>>
>> Maybe the server has connectivity problems to reach a DC, please post
>> an unedited ipconfig /all from it and also from the DC/DNS servers.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> Users cannot change their password on this server regardless of how
>>> they are connected, whether it be rdp, vnc, or console.
>>>
>>> "kj [SBS MVP]" wrote:
>>>
>>>> Test to see if the user can change the password outside of the TS
>>>> enviroment. At times I've had the TS keyboard get into a numlock
>>>> condition and had certain keys interpretted incorrectly. This only
>>>> occured within the TS session not when first establishing the TS
>>>> session.
>>>>
>>>> gjl_support wrote:
>>>>
>>>>> All password settings and gpo's are at default. I have moved the
>>>>> user back to the Users OU and it is still happening.
>>>>>
>>>>> "Meinolf Weber [MVP-DS]" wrote:
>>>>>
>>>>>> Hello gjl_support,
>>>>>>
>>>>>> Make sure to have the reuqired password settings correct,
>>>>>> according to the GPO on domain level, except you use fine grained
>>>>>> password policy on the OU where the server is located.
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> We have a non-dc Win2k8 terminal server. For some reason, when
>>>>>>> a user logs in either via rdp or console, they cannot change
>>>>>>> their password. When they try to change their password it says
>>>>>>> "username or password is incorrect". This is affecting all
>>>>>>> users even domain admins (me). Ive checked all gpo's and nothing
>>>>>>> really stands out. Thoughts?
>>>>>>>
>>>>>> .
>>>>>>
>>>> -- /kj
>>>>
>>>> .
>>>>

>> .
>>