Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Windows Time Service logs

Posted on 2011-09-02
10
Medium Priority
?
348 Views
Last Modified: 2012-05-12
Hi,
I am trying to find out if there is a way to see the activity of Windows Time Service? To be more specific -  time corrections (if any) has occurred in particular date and time.  

Thanks.
0
Comment
Question by:scripun
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +1
10 Comments
 
LVL 4

Expert Comment

by:LHFoods
ID: 36475130
You can view some activity in the System Event Log of the machine in question.  To see detailed info you will probably have to change the logging parameters for the w32tm service.
0
 
LVL 10

Expert Comment

by:abhijitwaikar
ID: 36475353
Hi,

Time synch plays important role in AD environment, You have provided very short info about your AD environment, server & workstations.

am trying to find out if there is a way to see the activity of Windows Time Service?
Go to event log> system and filter events by w32time source.

PDC emulator role owner's time service should be sync with external time source and all other members should be sync with it.

First of all find out which server is holding PDC Emulator Role by typing "netdom query fsmo"

Once you have find out the PDC role holder server ,Configure PDC role server with External Time Source

How to configure an authoritative time server in Windows Server
http://support.microsoft.com/kb/816042

To check if time sever is working fine give the command "w32tm /resync /rediscover" you will get one information Event in the Event viewer .

After Configuring PDC role server ,configure other member server /workstations in the site to sync the Time with PDC server role

So your Goal is

PDC Server Role :
-----------------------
NtpServer : time.windows.com,0x1
AnnounceFlags : 5
Type : NTP

Other Server & Clients Machine
------------------------------------------
NtpServer : Server name(PDC role holder),0x1 or IP address of PDC role holder server
AnnounceFlags : 10
Type : NT5DS

E.g : ntpserver : PDCservername,0x1 or (IP) xx.xx.xx.xx

Regards,
Abhijitw.
0
 
LVL 38

Expert Comment

by:Gerwin Jansen, EE MVE
ID: 36475379
The W32Time service is logging al its actions in the System Event log, correct.

There's no need to change any parameters, you can see what's happening just fine, just filter on the w32tm service.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:scripun
ID: 36475418
@abhijitwaikar
Thanks. I am all good there. Good info though.
@gerwinjansen
I don't see any W32Time service logs there for some reason.
0
 
LVL 10

Expert Comment

by:abhijitwaikar
ID: 36475534
Hi,

I don't see any W32Time service logs there for some reason.
Check the windows time service is started otherwise it does not generate w32time event. Aslo you can try to view by w32tm and net time commands.

Regards,
Abhijitw.

0
 
LVL 4

Expert Comment

by:LHFoods
ID: 36476097
@gerwinjansen
Successful w32time sync events are not logged by default.  Thus if the onle events you see are that
"The time service is now synchronizing the system time with the time source yourdc.yourdomain.com"
that typically means that the time synch is functioning properly.
0
 
LVL 4

Expert Comment

by:LHFoods
ID: 36476109
This site was pretty informative on logging successfull time changes:
http://www.stevebunting.org/udpd4n6/forensics/timechange.htm
0
 

Author Comment

by:scripun
ID: 36476205
@LHFoods
Thanks. It's still not clear to me if this will occur durring automatic time changes. I like to change w32time events to log more info. Is it posible?
0
 
LVL 38

Accepted Solution

by:
Gerwin Jansen, EE MVE earned 2000 total points
ID: 36476257
Hi, according to MS, you can setup logging, described here. I didn't test this personally though.
0
 

Author Comment

by:scripun
ID: 36476289
@gerwinjansen
This should be good for what I need.
Thank you all.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question