Network Troubleshooting / IT Support Guides
Check Windows time when authentication fails
Clock skew can disrupt Kerberos and certificate validation even when network transport works. Inspect the configured time source before changing credentials.
Environment and inputs: Mixed platforms · each example identifies its shell or required tool
Try the diagnostic command
Use the stated shell and platform. Replace sample domains, addresses, services and paths with values from the system you are authorized to support.
w32tm /query /status
w32tm /query /sourceHow to read the result
In Windows Command Prompt, the queries report time-service status and selected source where available. Domain-managed clients should follow the organization's time hierarchy.
What to do next
Compare the system clock with an approved reference and correlate any skew with authentication errors. Ask the domain or endpoint owner to repair the configured synchronization path.
Before you make a change
Do not manually set time or point domain members at arbitrary public peers. Time changes can affect active sessions and event correlation.