Domain time not syncing properly on client machines

Posted on 2009-04-29
Last Modified: 2012-05-06
We have a Server 2003 functional level Active Directory envirnoment.  We have set all domain controllers sntp service's to sync with our PDC Emulator.  Yet for some reason we have random client computers, both XP SP3 and Vista SP1, where the time is off by as much as 10 minutes and the querysntp command reveals they using
Question by:ista_na
    LVL 3

    Expert Comment

    If you go to HKLM\System\CurrentControlSet\Services\W32Time\Parameters, for the key "Type" do the client machines have a value of NT5DS?  
    LVL 18

    Expert Comment

    The default type is NT5DS and should be getting time from you DC. Make sure it has the type NT5DS. You can just run these command to set those machines to get time from your domain:

    w32tm /config /syncfromflags:DOMHIER /update
    w32tm /resync
    LVL 22

    Accepted Solution

    Configuring a domain time hierarchy in 2003 is very easy - you only have to set the PDCE to a timesource using the "net time /setsntp:xxx" command (I use  All of the other domain members will sync off of the PDCE (either directly or indirectly) using the w32 time service.  To clear any configs off of the other domain members and get back to a baseline, type this command sequence on all other domain members:

    net stop w32time
    w32tm /unregister
    w32tm /register
    net start w32time

    After the time configs are cleared, they should all synchronize to within a second of one another.  

    Odd as it seems - the net time command and w32tm commands don't operate off of all of the same registry entries and might give differing results.  On the clients with the 10min drift, just run the commands above to ensure they synchronize.  

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now