Event ID: 1202 occurs when you run a program that uses the Kerberos protocol to authenticate a user or host identity on a Windows Server 2003-based computer

When you run a program that uses the Kerberos version 5 protocol to authenticate a user or host identity on a Microsoft Windows Server 2003-based computer, you may find that an event message is logged in the System event log. The event message is similar to the following:

Source: ClusSvc
Type: Information event
ID: 1202 Description: The time delta between node <server> and node <server> is <value>in 100 nanosecs.

The problem occurs when a time-sensitive program runs on the computer that uses the Kerberos protocol. A time-sensitive program such as Microsoft Exchange Server 2003 may use a time stamp. The time is incorrect.

This event message is informational only. It does not indicate a problem if the reported time delta is less than five minutes. Time-sensitive programs and the Kerberos protocol require accurate time to work correctly. The Windows Time service will correct the time during the next polling interval.

The Kerberos protocol is an authentication mechanism that verifies user or host identity. The Kerberos protocol is the preferred authentication protocol for services in Windows Server 2003. This protocol examines the SkewTime registry entry. The value of the SkewTime registry entry is the maximum time difference that is permitted between the client computer and the server that accepts the Kerberos protocol authentication.

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base: