• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1248
  • Last Modified:

Can Windows XP reveal the NTP source that it received it's time from?

I've got a customer that has computers that are randomly pulling a time and date that puts them in 2044.  The only thing that makes sense is that they are polling an unauthorized (and incorrect) NTP source.  Is there a command or utility that I can run that will show me the name or address of the server that provided the NTP info to the workstation?
1 Solution

This link shows you how to change the NTP server. You should see the server there im assuming.
net time /querysntp
In the Event Viewer (right-click My Computer, choose Manage), in the System category, do View->Find.
For the Event Source choose W32Time from the picklist. Find Next, then double-click the first entry it finds... it should show you something like

The time service is now synchronizing the system time with the time source otc2.psu.edu (ntp.m|0x1|>

(That's what mine says, anyway.)
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

All pcs in domain obtain the time from their Domain controller. You need to check where the DC is synced with because all XP clients are in sync with DC's for kerboros logins. You may now want to check the ntp time source on the DC and not on the xp client.
  If its a pc on a workstation then ignore this answer.
Right click on the time at the very bottom right of the screen.  Choose "Adjust Date and Time.  The "Date and Time" tab should allow you to change the year.  alienvoice's post should tell you the source of the time check.
Having said that, have you rebooted lately?
And if this is something new, run a System Restore to a date before the problem started.
> All pcs in domain obtain the time from their Domain controller.

Yes, they *should* be. But if that's occurring properly it shouldn't be coming up with the wrong year, either. :-|

So check the event log and see if that shows it's actually syncing to the DC (or another designated authoritative time server) or some other setting such as the one specified on the Internet Time tab.

It doesn't make sense for the windows date offset to be changing it in that direction. e.g. in Regional and Language Options, in the Customize dialog on the Regional Options tab, then at the top of the Date tab... even if the 'short date' there is set to use 2-digit years.
Darr247 I totally agree with your point. But every time we had issue with the time sync this is what i would do..
1.) First do a :- net time /querysntp
2). If the dc name is listed then check the time on the dc. Also try to ping the domain controller and check if its reachable.
3.) If the time is wrong you may run into a lot of issues like .. Email sync and unable to login to domain and similar issues... as kerboros only gives a permit limit of 5 mins diff between dc and clients.
4.) If the time is correct on dc and if you are able to ping the dc then we shall remove the sntp from the cache and readd it.
Do a:
net time /setsntp
Then do a
net time \\timesrv /set /yes

See also..

Also see if this patch works for you.

Hope this helps..
Let me know how it goes..

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now