Solved

Windows 2008 R2 DC NTP sync issue

Posted on 2011-03-11
2
3,181 Views
Last Modified: 2012-05-11
Hey

I have an internal firewall hosting our NTP server.

I would like to set out DC to use this NTP sever

I have added the following:

C:\Windows\system32>w32tm /config /syncfromflags:manual /manualpeerlist:10.1.0.1
 /update

C:\Windows\system32>net stop w32time
C:\Windows\system32>net start w32time
C:\Windows\system32>w32tm /resync

But in the evetlog i see:

Time Provider NtpClient: No valid response has been received from manually configured peer 10.1.0.1 after 8 attempts to contact it. This peer will be discarded as a time source and NtpClient will attempt to discover a new peer with this DNS name. The error was: The peer is unreachable.

I have also added 0x8 ... same problem.

I have a small NTP tool - that show the NTP server is responding.

What to do?

Mike
0
Comment
Question by:mikeydk
2 Comments
 
LVL 19

Assisted Solution

by:Miguel Angel Perez Muñoz
Miguel Angel Perez Muñoz earned 250 total points
ID: 35107460
0
 
LVL 2

Accepted Solution

by:
temores earned 250 total points
ID: 35160044
You should ensure that UDP port 123 is open to that port,it is probably the main cause. also remember that the time configuration depends on the time service configuration.

NT5DS means that the ntp client (even doman controllers) will search for the PDC on the domain and get it's hour from it, if your DC is configured this way it will override any configured NTP server and search for the PDC, you can change this setting from the following reg key: HKLM\system\currentcontrolset\services\w32time\Parameters\

Type: NTP (REG_SZ) or NT5DS
NtpServer means that the client will search for the configured stratum server, you can try adding somethin like 10.1.0.1,0x9

I strongly recommend to create a dns alias (ntp.domain.com) and point that to the IP you like, you can unse that dns record instead to configure the NTP clients so if you need to change the IP don't have to crawl on all you customized servers.

cheers.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question