I am trying to get a windows domain to all play happily together as far as time synchroniation goes. It isn't going well.
Here is what I have done so far:
Default Domain Policy --> Administrative Templates --> System --> Windows Time Service --> Time Providers.
Enabled Windows NTP Client and Configured Windows NTP client to use the following settings:
NtpServer: pool.ntp.org,0x1
Type: NT5DS
CrossSiteSyncFlags: 2
ResolvePeerBackoffMaxTimes
SpecialPollInterval: 3600
EventLogFlags: 0
Seems simple enough. Synch with the given time provider every 3600 seconds. Does NOT work.
All PCs on the domain have identical time, including comain controllers. But they are all almost 10 minutes fast.
Even entering the following command at a command prompt shows an offset of 568+ seconds.
w32tm /monitor /computers:pool.ntp.org
So, I am checking local PC time against the time server I have configured the network to use, and still get an offset of almost 10 minutes.
So, here is what I want to eventually accomplish:
1) Get Domain Controllers to synch CORRECTLY with an external NTP server (don't care which) through the default Domain Controllers Policy in the group policy editor.
2) Get all client PCs to synch from one of the Domain Controllers through the Default domain policy. I have a simple single windows domain (vs-us.local) with only 13 clients. This shouldn't be a big deal.
3) Avoid running manual sntp configuration from a command line on each individual PC.
What am I doing wrong, or better yet, where should I start over. I have played with nearly every tutorial online to no avail. I am looking for walkthrough steps from beginning to end at this point.
Thanks so much!
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
The only DC that needs to sync externally is the PDC emulator; every other machine on your domain will automatically sync with this DC without intervention. Here's the quick process to find pdc emulator:
http://technet2.microsoft.
You can set the ntp provider on this server with:
net time /setntp:<ntp server(s)>
Or 'net time /querysntp' to see the current config
OK, I found out my PDC Emulator is dc1.vs-us.local, and used "net time /setntp:pool.ntp.org,0x1" to set the time server to poo.ntp.org.
I have made no changes on any other PCs in my network.
Sounds like I should undo what I did in the group policy manager? Yes or no?
I'll wait a few hours, check things out, and report back.
aissim is unfortunately -incorrect-, however, in how to configure the PDCe to hit an authoritative time source - 'net time' is a deprecated method and should no longer be used in XP and 2003.
To configure a 2K3 server to obtain its time from an external time source, follow the steps listed in this KB: http://support.microsoft.c
Using "w32tm /monitor /computers:pool.ntp.org" shows the following.
pool.ntp.org [63.73.218.130]:
ICMP: 59ms delay.
NTP: -567.7277603s offset from local clock
RefID: 'CHU2' [67.72.85.50]
Leading me to believe that there is no firewall problem whatsoever.
pool.ntp.org is the timeserver my PDC emulator is now set to synch with, according to the /querysntp switch. However, I am STILL 567 seconds off. Any ideas?
Also, running "w32tm /resync" returns the following error:
Sending resync command to local computer...
The computer did not resync because no time data was available.
WTF? If the server is set to use pool.ntp.org, and manually querying pool.ntp.org returns the results of a connection, then why doesn't that command have "no time data" available?
Any other ideas?
Hi,
Yes, firewall seems ok. The entry posted event identify the offset (567.7s).
At my knowledge, the time should not be set on the PDC emulator but on the Infrastructure Master.
Can you make sure that that guys is sync'ed. You can find it in AD Usersand Computers, Operations Masters of the domain.
I hope this helps
I was working with someone on EE on what sounds like an identical issue last week, and the fix ended up being this:
http://www.jsifaq.com/SF/T
LauraEHunterMVP:
I went through the instructions located at "http://support.microsoft.
PDC and Operations Master are both dc2.vs-us.local. That server (and the other domain controller) are BOTH 10 minutes fast, and will not correct themselves for anything.
I have manually set both domain controllers (including the PDC / Operations Master) to the correct time, within a few seconds anyway. Last time I did that they went BACK to being 10 minutes fast. We'll see what happens this time around.
Business Accounts
Answer for Membership
by: netnounoursPosted on 2007-10-08 at 10:39:08ID: 20035589
Hi,
Have you checked the your firewall is leting udp/123 thru ? Do you see anything in the firewall log ?
You just need to sync up your DC, the rest will follow as long as you are dealing with W2K and above.
I hope this helps