Can Windows XP reveal the NTP source that it received it's time from?

Posted on 2008-11-13
Medium Priority
Last Modified: 2012-05-05
I've got a customer that has computers that are randomly pulling a time and date that puts them in 2044.  The only thing that makes sense is that they are polling an unauthorized (and incorrect) NTP source.  Is there a command or utility that I can run that will show me the name or address of the server that provided the NTP info to the workstation?
Question by:swolfersberger
LVL 15

Expert Comment

ID: 22955552

This link shows you how to change the NTP server. You should see the server there im assuming.

Expert Comment

ID: 22955639
net time /querysntp
LVL 44

Accepted Solution

Darr247 earned 2000 total points
ID: 22955896
In the Event Viewer (right-click My Computer, choose Manage), in the System category, do View->Find.
For the Event Source choose W32Time from the picklist. Find Next, then double-click the first entry it finds... it should show you something like

The time service is now synchronizing the system time with the time source otc2.psu.edu (ntp.m|0x1|>

(That's what mine says, anyway.)
Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database


Expert Comment

ID: 22956060
All pcs in domain obtain the time from their Domain controller. You need to check where the DC is synced with because all XP clients are in sync with DC's for kerboros logins. You may now want to check the ntp time source on the DC and not on the xp client.
  If its a pc on a workstation then ignore this answer.
LVL 50

Expert Comment

ID: 22956537
Right click on the time at the very bottom right of the screen.  Choose "Adjust Date and Time.  The "Date and Time" tab should allow you to change the year.  alienvoice's post should tell you the source of the time check.
Having said that, have you rebooted lately?
And if this is something new, run a System Restore to a date before the problem started.
LVL 44

Expert Comment

ID: 22957282
> All pcs in domain obtain the time from their Domain controller.

Yes, they *should* be. But if that's occurring properly it shouldn't be coming up with the wrong year, either. :-|

So check the event log and see if that shows it's actually syncing to the DC (or another designated authoritative time server) or some other setting such as the one specified on the Internet Time tab.

It doesn't make sense for the windows date offset to be changing it in that direction. e.g. in Regional and Language Options, in the Customize dialog on the Regional Options tab, then at the top of the Date tab... even if the 'short date' there is set to use 2-digit years.

Expert Comment

ID: 22957855
Darr247 I totally agree with your point. But every time we had issue with the time sync this is what i would do..
1.) First do a :- net time /querysntp
2). If the dc name is listed then check the time on the dc. Also try to ping the domain controller and check if its reachable.
3.) If the time is wrong you may run into a lot of issues like .. Email sync and unable to login to domain and similar issues... as kerboros only gives a permit limit of 5 mins diff between dc and clients.
4.) If the time is correct on dc and if you are able to ping the dc then we shall remove the sntp from the cache and readd it.
Do a:
net time /setsntp
Then do a
net time \\timesrv /set /yes

See also..

Also see if this patch works for you.

Hope this helps..
Let me know how it goes..


Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This month, Experts Exchange’s free Course of the Month is focused on CompTIA IT Fundamentals.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question