Home / server / Questions / 78505
Accepted
iokevins
Asked: 2009-10-27 15:24:43 +0800 CST

RDP Connectivity to Windows Server 2003 Servers Intermittently Lost After Date Changes

  • 772

Connectivity via RDP to our Microsoft Windows Server 2003 web and database servers unpredictably drops at varying points after we change the server dates. It usually occurs when we leave the server dates changed and remain logged in via RDP overnight. We can only restore RDP connectivity with a server reboot or a reset of the server dates to the current date.

We use these servers for web application user acceptance purposes; moving the server dates into the future simulates the passage of time in the web application. Staff then perform user acceptance tests of web application functionality.

Thanks for any insight into why this may be occurring. How would I even begin to debug such a problem? I am working with our hosting provider and hope to have additional details soon.

windows-server-2003

2 Answers

  1. Some protocols are sensitive about the time difference between communicating parties.

    I remember having problems obtaining kerberos ticket with Samba from DC. When there was more than 5 minute difference between the two computers, the ticket was not issued.

    I'd say it has to do with timestamping packets (maybe replay protection), so you'll probably have to keep their server times synced.

    • 1
  2. Best Answer

    We identified the root cause and the solution.

    First, the issue appears to be with RDP access to the server, not VPN; I have updated the question appropriately.

    Second, the issue appears to be a failure to renew domain credentials after changing the server date.

    The solution is to create a local user account on the server for use when changing the server date. In this way, re-authorization of expired domain credentials is not prevented by the difference in server dates.

    So far, so good! We tested this on two servers today. On one, we created the local user account. On the other, our third-party software vendor used the domain account. They subsequently lost RDP access through the domain account but continued to have RDP access through the local user account.

    Thanks to everyone for their assistance with this issue.

    • 0