Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

time.windows.com seems to be 3 minutes off with other NTP server

Posted on 2011-09-15
5
Medium Priority
?
2,229 Views
Last Modified: 2012-06-27
Hi,

I have my PDC emulator DC getting the time from time.windows.com.

I have been looking the time at other NTP like NIST at they seem to be 3 minutes ahead from time.windows.com

Is there any way to get the real time from time.windows.com? Going to their site and getting the real time displayed there?
0
Comment
Question by:llarava
  • 3
5 Comments
 
LVL 4

Expert Comment

by:jason_0573
ID: 36543864
You dont have to use the M$ time servers. There are others that are Stratum 2 and 1 military grade that you can use that are public.

http://support.microsoft.com/kb/262680
0
 

Author Comment

by:llarava
ID: 36543887
From the PDC I am running the following command - which says that my DC is going 3 minutes faster than time.windows.com

How do I fix this?

C:\Users\administrator.SYRACUSE>w32tm /monitor /computers:time.windows.com
time.windows.com[65.55.59.60:123]:
    ICMP: error IP_REQ_TIMED_OUT - no response in 1000ms
    NTP: +191.3552280s offset from local clock
        RefID: time.nist.gov [192.43.244.18]
        Stratum: 2

Warning:
Reverse name resolution is best effort. It may not be
correct since RefID field in time packets differs across
NTP implementations and may not be using IP addresses.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36544038
I would use the military time servers.

Go through this link setup time server according to this link

http://tigermatt.wordpress.com/2009/08/01/windows-time-for-active-directory/
0
 

Accepted Solution

by:
llarava earned 0 total points
ID: 36545344
I have fixed my problem as follows:

Ran the command w32tm /configure /manualpeerlist:"time.windows.com" /syncfromflags:manual /reliable:yes /update

We changed the setting from NT5DS to NTP under  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type.

Changed time in seconds to 900 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval

Changed time in seconds to 1800 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxPosPhaseCorrection

Changed time in seconds to 1800 under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\MaxNegPhaseCorrection

It also took some time for the time to get sync

The client machine can sync time from any of the domain controllers. It’s not necessary that it will be the PDC one. So the machine on which we are seeing the difference of few seconds might be getting sync from the other DCs that weren't in sync with PDC yet.


Here are articles that I have used.

http://support.microsoft.com/kb/816042

http://technet.microsoft.com/en-us/library/cc773013(WS.10).aspx

http://social.technet.microsoft.com/Forums/ar/w7itprogeneral/thread/5813a049-5d0b-4222-99d4-6c083d2198fc

0
 

Author Closing Comment

by:llarava
ID: 36565493
The other 2 solution did not provide a solution.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question