Hi, I am really new in Active Directory on Windows 2003.
I have a problem at the company, because the clock of all computers are in different mins..
for example: some have 10:20AM, but some have 10:30AM. etc..
So I read that if I have active directory and I connect them at the AD, they will syncronize with the clock of the master server where is the AD.
I tried and I don´t see any change..
My enviroment I have Windows XP Pro, with SP1,SP2. , Windows 2000 Pro. , Windows 2000 Server SP4, Windows 2003 with SP1,SP2 and SP3.
I want to syncronize Servers,Laptops, PC´s, and cheker clocks.
Let´s see you give me the answer and works, what happen for the servers , where I can´t add them at the AD, is there a way to syncronize them too?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
You should be using w32tm for Windows 200x rather than "net time".
If you wanted to configure the PDCe to sync with an external source you would use:
w32tm /config /manualpeerlist:<servers> /update
Personally I use pool.ntp.org as an external time source. The address contains a number of authoritative time sources.
Clients should be synchronising with the DCs in your environment by default. If you're encountering issues with that it might be worth running:
w32tm /resync /rediscover
Or enabling logging by adding the registry keys documented here:
http://technet.microsoft.c
Look under "The following registry entries must be added in order to enable W32Time logging:".
Finally, systems on your network use DNS to discover Domain Controllers. If DNS isn't correctly configured you will discover a multitude of problems, including authentication problems such as extremely long logon.
Chris
By default the PDCe will synch all computers within the domain to itself. It has time synchronization flags that will keep your clients within +/-5 minutes of the PDCe> So, you have a problem with the default configuration.
The two most common ways to have problems with the default configuration are SOFTWARE FIREWALLS AND GROUP POLICY. In other words, blocking or overriding the default configuration.
1) Many firewalls block the time port (port 123). This includes Windows Firewall. Windows Firewall is enabled by default on XP and above clients. So, by default, you are messing up your default configuration of time. GOOD GRIEF, HUH? Windows does this to prevent attacks on those ports for home based computers that don't need to synch to a domain controller. Another example is: Windows firewall also prevents things like PING to prevent from DDoS attacks.
2) Group policy also overrides the default configuration of the time service. Group policy allows you to define a group of settings that control the time service. This overrides the default configuration of the PDCe. If you have not yet used any group policies for time, then concentrate your efforts on the firewalls.
This article explains how to set up Time within the NIST (National Institute of Standards and Technology) ITS (Internet Time Service) servers.
http://tf.nist.gov/service
NOTE: One thing I noticed on this article is you have to open up port 123/UDP to your domain in order to get these time servers to synch with your PDCe. There is an alternative. There is a free GUI program called SYMMTIME, that will synch your PDCe by using port 80 to synch with an outside NIST server. Hey, one less port to worry about, right? For a more secure network, I recommend using SYMMTIME and keep your port 123 on your enterprise firewall secured. Then, malicious traffic on port 123 will not make it through your enterprise firewall to your servers and clients.
Now, back to the client's synchronization:
Step 1)
Download SYMMTIME on the PDCe--
http://www.symmetricom.com
>>>((((While on this site, also consider your free download of LMcheck. This tool allows you to see the entire Windows domain time without running from one computer to another)))))
Step 2)
Set your time synchronization Flags to your liking. By default, the phase offset is +/- 5 minutes. This means if your client computer is off by more than 5 minutes, it will resynch to the server.
Article:
http://support.microsoft.c
http://support.microsoft.c
Step 3)
Remove all preconfigured Group policies that you may have set when trying to get your time service to work.
Step 4)
Prevent the client's software firewalls from blocking synchronization.
http://www.beaglesoft.com/
You do the same things using group policies to make these exceptions for the entire domain.
Step 5)
Check your progress by using LMcheck, (found on symmetricomm's website)
Additional information:
How time is synchronized through enterprise firewalls:
http://dtdocs.ntp-systems.
Alowing ICMP traffic using Windows firewall:
http://www.ust.hk/itsc/its
Business Accounts
Answer for Membership
by: meugenPosted on 2008-12-14 at 23:40:41ID: 23171609
The time will be taken from Domain controller with PDC role. You need only to configure it as an authoritative tine source:http://support.micr