Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

How long does it take for the workstations to get their time from the PDC

Posted on 2011-02-12
13
Medium Priority
?
1,663 Views
Last Modified: 2012-05-11
I just set the time on our PDC.  Server 2008
How long before the workstations get this new time?  
Can I force the workstations to get the time without going to each one?
Do you need to use an external time source for the PDC or can you just set the clock?
0
Comment
Question by:J.R. Sitman
  • 8
  • 5
13 Comments
 
LVL 3

Expert Comment

by:andreibutu
ID: 34878647
The PDC Emulator in the root domain is generally configured to sync its local clock with an authoritative NTP server. This NTP server may be located on the internet, such as time.windows.com, or it can be a device on your internal network, such as a GPS atomic clock. The PDC Emulators in the child domains will synchronize their time with the root PDC Emulator. Domain Controllers in the domain sync with the PDC Emulator in their respective domains. Clients will then sync their clocks with the DCs in their domain. Time Synchronization is critical for the Kerberos protocol to authenticate successfully.

BR,
Andrei
0
 

Author Comment

by:J.R. Sitman
ID: 34878661
how often do the clients sync with the PDC
0
 

Author Comment

by:J.R. Sitman
ID: 34878687
what is the proper command on a 2008 server to set it clock to time.windows.com.  I tried net time /setsntp:time.windows.com, but it doesn't work.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LVL 3

Expert Comment

by:andreibutu
ID: 34878699
0
 
LVL 3

Accepted Solution

by:
andreibutu earned 1000 total points
ID: 34878709
actually the clients sync the time with their domain controllers in the site. Domain controllers sync with the PDC`s domain and the syncronization is immeadtely.
0
 

Author Comment

by:J.R. Sitman
ID: 34878735
The article didn't help.  I used the syncfromflags:time.windows.com and got unknown parameter for syncfromflags: 'time.windows.com
0
 
LVL 3

Assisted Solution

by:andreibutu
andreibutu earned 1000 total points
ID: 34878754
On the DC with the PDCEmulator FSMO:

w32tm /config /manualpeerlisteers /syncfromflags:manual /reliable:yes /update

With "peers" you can set the time source, either DNS name (time.windows.com)
or an ip address from a reliable time source.

If some domain machines have problems, run this command as it is:

w32tm /config /syncfromflags:domhier /update

After that run:
net stop w32time
net start w32time
0
 

Author Comment

by:J.R. Sitman
ID: 34878811
I think I got it.  I ran w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:yes /update.  It stated it was successful.  Did I do it correctly?

0
 
LVL 3

Expert Comment

by:andreibutu
ID: 34878826
yep, that`s correct.
0
 

Author Comment

by:J.R. Sitman
ID: 34878836
Thanks.  FYI the post 34878754 has a typo.  /manualpeerlisteers, should be /manualpeerlist:peers
0
 

Author Closing Comment

by:J.R. Sitman
ID: 34878852
thanks
0
 

Author Comment

by:J.R. Sitman
ID: 34878916
hope you're still monitoring this.  I have three locations.  one I enter the command
w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:yes /update. on one of the PDC's then run w32tm /query /source.  It states free-running system clock.  I tried three times?  why wont it change to time.windows.com?
0
 

Author Comment

by:J.R. Sitman
ID: 34878932
I just looked in the registry and it states the NTPServer is time.windows.com
0

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question