Time service source changed and Kerberos breaks intermittently

Scenario

A server time source change introduces intermittent Kerberos and service authentication failures.

Recommended Resolution Path

1. Validate the current time source hierarchy from domain root to member server.
2. Check whether virtualization host time sync is fighting domain time.
3. Force a resync and monitor drift over time rather than assuming the first correction holds.
4. Treat time-source changes as authentication-impacting infrastructure work.

Technician Notes

Capture the exact scope of impact, confirm which dependency failed first, and document whether the issue reflects broader domain or server drift.