Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Domain member time offset from domain controller

Posted on 2011-09-12
8
Medium Priority
?
459 Views
Last Modified: 2012-05-12
Hi Experts,

We have some servers that recently joined the domain, some of the servers' time seem to sync with DC fine, while the others just off a minute or so.

The config of these servers is pretty much identical.

Any advice will be appreciated.

Jimmy
0
Comment
Question by:jimmy1829
8 Comments
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36526231
0
 
LVL 17

Expert Comment

by:Tony Massa
ID: 36526500
Are these VMs?  Disable the VMTools option to sync with the HOST time.
0
 
LVL 10

Accepted Solution

by:
abhijitwaikar earned 1000 total points
ID: 36526714
Are these members within +/- 5 minutes range?

By default, the domain controller will broadcast time to all clients. It has a phase offset of +/- five minutes, that you can see within the authoritative time server article below. This phase offset means, if clients are more than or less than 5 minutes off the domain controller time, they will synchronize their time with the server, you can reduce that phase offset on the domain server. That will help your clients keep a little more accurate time.

http://support.microsoft.com/kb/816042.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 

Author Comment

by:jimmy1829
ID: 36526977
Thanks guys,

These are physical servers, and yes, they are all in +/-5 mins range. Does that mean everything is fine?
0
 
LVL 17

Expert Comment

by:Tony Massa
ID: 36527064
As long as your servers have the successful W32Time entries, you should be fine
0
 

Author Comment

by:jimmy1829
ID: 36527107
Thanks again,

So for the maxallowedphaseoffset setting, do I configure that on the domain controller as a group policy to apply to the proper OU?
0
 
LVL 17

Assisted Solution

by:Tony Massa
Tony Massa earned 1000 total points
ID: 36527143
http://technet.microsoft.com/en-us/library/cc773263%28WS.10%29.aspx

I would make sure that you're following best practices in the TechNet article above.  There generally shouldn't be any need to configure any of the client settings unless you have time-sensitive applications.  Make sure that you're servers have the default settings and then make any adjustments you may need.
0
 

Author Comment

by:jimmy1829
ID: 36527155
thanks guys, it works like a charm!
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

963 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question