Solved

Advice on setting up time server in hyper-v environment

Posted on 2010-09-03
5
879 Views
Last Modified: 2013-11-06
Our DCs are virtualised within a Win 2008 R2 Hyper-V environment on a network not connected to the internet.  
Does anyone have advice as to best practice for setting up time service?

Currently I manually correct the time on the PDC (virtual) and have group policy set so that all servers and computers look to this pdc to set their time.
I have disabled the Time Integration within HyperV settings - but I seem to have a problem when rebooting the physical host that the PDC is running on. Possibly because the host cannot find the DC when it first starts up, it seems to make up its own time which then pushes to the dc and all other servers.Not sure if the host is getting the time from the bios, which I do keep correcting - but seems to be trailing off quite fast.

In any event I want to prevent the PDC from changing time unless I expressly correct it - as a simple reboot of the host server means the time is changed on all desktops and servers to something up to an hour out!
Any help gratefully received
thanks
0
Comment
Question by:itadminuk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 6

Accepted Solution

by:
robbe earned 250 total points
ID: 33597266
First of all you've done the right thing ot disable the time sync. The DC should be the time source for all clients in the network. Second of all you should configure the DC to sync with an ntp server. Here is some more information about that: http://support.microsoft.com/kb/816042

Last but not least: It's not a good idea to join the host in the domain if you are running the DC virtualized. You should consider adding a physical dc to the network if you need that. Otherwise just leave it in a workgroup. For testing purposes you may consider to make the hyper v host a Domain Controller as well.

Greetz,
Robin
0
 
LVL 15

Assisted Solution

by:msmamji
msmamji earned 250 total points
ID: 33603481
robbe is spot on with everything especially with regards to having the Host machine on workgroup when all you DCs are virtualized.

You are wondering why you are still having time sync on the DC VM, despite having disable time synchronization. That is because time synchronization that is done when the VM is started is not overriden by this feature. You must understand that Physical Machine have battery-controlled clock from which the machine gets the time when it starts. There is no such clock in a VM, so when the VM boots, it retrieves it initial time from the host regardless of this setting. This option only controls whether further synchronization will be done or not.

So its not the restart of the Host that is causing this, rather this is caused by the booting of the VM. It boots and takes the initial time from the host and therefore you need to reset the time on the DC. I would suggest Having the Physical DC and making it the PDC to avoid such issue.

Regards,
Shahid
0
 
LVL 6

Expert Comment

by:robbe
ID: 33611599
itadminuk,

Did we answered your question or do you need some more information?

Greetz,
Robin
0
 

Author Comment

by:itadminuk
ID: 33612367
thanks guys for your quick responses. really really helpful. Robbe - I can't configure an ntp server as it's not connected to the network but it does look as though I am going to have to see why the physical host time keeps drifting off.
Also Shahid - that's really answers the question - I didn't realise that the vM would STILL take the time off the host even with integration turned off.
I am now going to investigate whether I can use a physical dc or take the host off the domain and into a workgroup.
thanks guys
0
 
LVL 15

Expert Comment

by:msmamji
ID: 33612799
Can Say it with surety as I have read it in the book, "Mastering Microsoft Virtualization", Chapter 3, Page 104, Heading "Integration Services". Mentioning here for reference

Regards,
Shahid
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question