Solved

Synchronize Windows Server 2008 Domain Controller to GMT

Posted on 2008-06-19
14
9,088 Views
Last Modified: 2012-07-22
Hi;

how can I sync my Windows Server 2008 domain controller to a atomic clock in internet to make sure all other server in the domain got the identical time and date?  Especially my Exchange 2007 server.  Please give me a step by step procedure?  I do not want to install any othr 3rd party software on my domain controller, I just want to use the feature in Windows 2008.

Thanks!
0
Comment
Question by:KANEWONG
  • 7
  • 4
  • 3
14 Comments
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
You must first enable the time service, if it is not already enabled. To do this, go to Start, Administrative Tools, Services. Find Windows Time in the list, double-click, select "Automatic" from the Startup Type list, then press OK.

Now, press Start, type cmd and press OK to pull up a command prompt. Execute the following commands, where a new line means you press enter. You can ignore any Access Denied error messages it throws.

net stop w32time
net start w32time
net time /setsntp:time.windows.com
w32tm /config /manualpeerlist:time.windows.com,0x8 /syncfromflags:MANUAL
net stop w32time && net start w32time
w32tm /resync /rediscover

That will get you synchronizing time with Microsoft's NTP servers. As a test, you could set the time out by a minute or two (but no more than about 5 minutes), then execute w32tm /resync and the time will jump back to the correct time at the present time.

-tigermatt
0
 
LVL 1

Author Comment

by:KANEWONG
Comment Utility
Hi;

after I type the command "w32tm /resync /rediscover", I got the following message.

The computer did not resync because no time data was available.

For the command listed above, if the server rebooted, do I need to re-enter again, or how can I use a script to start it automatically?
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
Once the w32time service is up and running and configured to start automatically, everything will remain after each reboot.
0
 
LVL 1

Author Comment

by:KANEWONG
Comment Utility
what is the meaning of "The computer did not resync because no time data was available."

I did not see the time sync to the correct time stamp.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
Did you run all the commands EXACTLY as I posted?
0
 
LVL 1

Expert Comment

by:biggstrc
Comment Utility
To jump in here, I am experiencing the same issue.  I can't find documentation anywhere for 2008.  I tried the solution above and I got the same error (The Computer did not resync because no time data was available).  I didn't rekey the instructions, I copied them into a bat file just to be sure I didn't do anything wrong.  I've looked at other instructions on the web, but I always get this error.  I've checked to be sure UDP port 123 is allowed (it is)

Any help would be appreciated.  Thanks.
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 250 total points
Comment Utility
OK, try these commands instead. Just to note, I've just tried this myself, and found that even though that error is appearing, the time is still being updated!

Be sure to run these from an elevated command prompt:

net stop w32time
w32tm /unregister
w32tm /register
net start w32time
net time /setsntp:time.windows.com
w32tm /config /syncfromflags:MANUAL /manualpeerlist:time.windows.com,0x8
net stop w32time

(At this stage, change time so it is 5 minutes out)

net start w32time
w32tm /resync /rediscover

The time should go back - even if you get an error.

-tigermatt
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 1

Expert Comment

by:biggstrc
Comment Utility
I tried this exactly like you said.  It did not change the time back.  Are you sure you have your time protocol set to look to an NTP server (registry key setting)?  If you are on a domain and haven't changed this setting, the time will reset because the DC will pass the new time down.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
Yes, I'm fully aware of that. The PDCe is responsible for advertising itself as a time server and to push the time down. Running the /syncfromflags:MANUAL forces the server to use NTP as the time source, as opposed to NT5DS.
0
 
LVL 1

Author Comment

by:KANEWONG
Comment Utility
I tried again but still not working, when I began to type those command, it was 1:09pm, when typing done, it was 1:10pm.  Therefore the time did not sync.

How can I test if my server can talk to the time.windows.com?
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
Try pinging time.windows.com.

Also, try using time.nist.gov in place of time.windows.com - that might help.

Are you sure the time on the server is actually wrong?
0
 
LVL 1

Expert Comment

by:biggstrc
Comment Utility
That did it for me.  Changing to time.nist.gov was the trick.  I couldn't ping time.windows.com but I assumed they had blocked ICMP traffic.  Thanks for the help.
0
 
LVL 1

Author Comment

by:KANEWONG
Comment Utility
Finally, it works for me when I sync to time.nist.gov.
0
 
LVL 58

Expert Comment

by:tigermatt
Comment Utility
Sounds like you must be having a problem connecting to time.windows.com - I can get to it, but there have been issues using that NTP server in the past!

Thanks again
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now