I just found out the reason I'm continually having things not be the correct time. Everything is syncing with our PDC, and it in turn is syncing with time.windows.com. I just found what a mess ...
You want the PDC Emulator in the root domain to be using NTP and all other DCs to be using NT5DS to sync time. As long as everything is within 5 minutes of each other Kerberos (within the forest realm ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results