There Is A Time And/Or Date Difference Between The Client And Server

When trying to log on or authenticate on you domain, you get this error:

ERROR_TIME_SKEW

Error: 1398 (0x576)
There is a time and/or date difference between the client and server.

When the date or time on the server and client are different, Kerberos (Microsoft’s security system that handles logons) assumes that the client is experiencing a time-delay attack and denies the login.

To fix the time skew error, ensure that both client and server have the same date and time and are using the same source of time (NTP protocol) or that the client uses the server as an NTP server.

Typically this is caused by the client having a faulty BIOS battery, which is used to keep the timer clock on the motherboard running when the client is powered off. In this scenario, the client typically doesn’t update its time from the NTP server because there needs to be less than 5 minutes difference between the client and NTP server to allow the client to update. Replacing the faulty battery and correcting the time usually fixes the time and/or date difference between the client and server error.