To configure a storage system as a member of a Windows Active Directory domain, the time on the storage system must be within plus or minus five minutes of the domain controller time.

To configure a storage system as a member of a Windows Active Directory domain, the time on the storage system must be within plus or minus five minutes of the domain controller time.

• A. True
• B. False
• C. NA
• D. NA

Answer: (A)

Time synchronization between a domain member and domain controllers is essential because Kerberos authentication relies on accurate time stamps. Windows Active Directory uses a small window of clock skew to prevent replay and ticket issues, and that window is five minutes by default. If the storage system’s clock drifts more than five minutes from the domain controllers, Kerberos tickets can be considered invalid, causing authentication failures and preventing proper AD join or operation as a domain member. For this reason, the storage system should be configured to synchronize its time with the domain controllers (typically via NTP) so its time stays within that five-minute tolerance. In other words, the statement is correct: the time must be within plus or minus five minutes of the domain controller time.

Time synchronization between a domain member and domain controllers is essential because Kerberos authentication relies on accurate time stamps. Windows Active Directory uses a small window of clock skew to prevent replay and ticket issues, and that window is five minutes by default. If the storage system’s clock drifts more than five minutes from the domain controllers, Kerberos tickets can be considered invalid, causing authentication failures and preventing proper AD join or operation as a domain member. For this reason, the storage system should be configured to synchronize its time with the domain controllers (typically via NTP) so its time stays within that five-minute tolerance. In other words, the statement is correct: the time must be within plus or minus five minutes of the domain controller time.