Solved

how to tell what time source I have?!

Posted on 2010-11-18
3
814 Views
Last Modified: 2012-08-14
I am being audited for PCI and I'm trying to figure out our NTP settings. I have setup my domain controllers to sync to a internal NTP server. When I do the following command on the domain controllers it comes up with the correct server

net time /querysntp
The current sntp value is: 172.16.5.68

when I go to my hosts that are connected to these domain controller I see the following:

on win2k8 machines:

w32tm /query /source
mydc1.domain.com

on win2k3 machines:
net time /querysntp
The curretn SNTP value is: time.windows.com,0x1.

it seems like my windows 2008 servers are going to the domain controller they authenticated to which is what I want. I want my DC to go to an outside source and my clients to grab time from the DC. why are my client 2003 machines not following suit?! I have checked my GP settings and tried having them sync to the domain and get the following event.

The time service is now synchronizing the system time with the time source mydomainame.COM (ntp.m|0x0|10.0.4.62:123->10.0.3.52:123).

which is what I would want but when I run the query command it comes up and says its still using time.windows.com? what gives?




0
Comment
Question by:jbla9028
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
mittermueller earned 400 total points
ID: 34167666
Don't mix up. NTP server is used only when the computer’s time client is configured as NTP or AllSync. Check w32tm on clients and ntp only on that DC who is configured to be a primary time server in your domain.
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 100 total points
ID: 34167903
On your Windows 2003 servers run w32tm /resync /rediscover

Then w32tm /monitor
0
 
LVL 5

Expert Comment

by:mittermueller
ID: 34168214
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Extend AD schema for SCCM 2012 3 41
Migrating Roaming Profiles to new server 5 44
How to decline Windows updates with SCCM? 2 49
Windows Server Event Log DSM Error-1000 10 31
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question