I have searched over and over for this solution, but all I get are the standard boilerplate answers that don't work.
We have a small, flat domain with a single DC. It's a 2012 Server and we have Windows 7 clients. When a particular user tries to log in, the login screen gives the error "there is a time and/or date difference between the client and server". However, it is only that user. I can log in from that workstation using different user names. That user (a domain admin) can log in locally to the server and can also log in to other workstations. Things I have done:
1.) Set the user's account to not require Kerberos in the account tab in ADUC.
2.) From the command line, run "net time /DOMAIN:<my domain> /SET
3.) From the command line, run the following commands:
w32tm /config /manualpeerlist:"0.north-america.pool.ntp.org, 1.north-america.pool.ntp.org, 2.north-america.pool.ntp.org, 3.north-america.pool.ntp.org" /syncfromflags:manual /reliable:yes /update
w32tm /query /peers
net stop w32time
net start w32time
w32tm /resync /nowait
Throughout this process, there has been zero difference between the time on the client workstation and the server, but I wanted to cover my bases. The next step I'm considering is to delete the user profile, but I figured I'd ask here first, since that is an inconvenience that should not have to happen. Any insight would be greatly appreciated.
Larry Simmons