Problem description:
When the computer is added to the domain, the local time and the domain control server time are inconsistent, you cannot use the domain account to log on to the desktop.
Cause:
Winserver systems use the Kerberos authentication protocol. The key to Kerberos authentication is time consistency. If the time between the computer and the domain control server is inconsistent, the domain account cannot be successfully logged in.
Solution:
Determine whether the machine network is smooth. (You can ping domain control)
Make sure you have the account permission to log on to the domain control server.
Check whether your Windows Time Server service is enabled.
On the command line interface, enter the net Time Domain Controller server name or IP address/set/y.
This article from the "" blog, please be sure to keep this source http://7492110.blog.51cto.com/7482110/1537266