Solved

How do I disable network time for workstations and how do i make all workstations retain the right time

Posted on 2011-09-20
7
238 Views
Last Modified: 2012-06-21
we deployed a windows 2008 server and joined 8 computers to the domain. all 8 computers are windows xp pro, 32 bit.

the time keeps changing on the workstations - i would like to make all computers retain the "real" time.  I would prefer to just disable the "network time" received via AD.

What is the best way to go about doing this?  should I just disable the "windows time" service?
0
Comment
Question by:fstinc
7 Comments
 
LVL 4

Expert Comment

by:Ryan Weaver
ID: 36570024
Unfortunately, if you stop the time sync between the domain and the members, you will start running into authentication issues as they start to grow farther out of sync.

What is happening with the time? are all the workstations and the domain controller all have the same time zone set?
0
 

Author Comment

by:fstinc
ID: 36570039
yes, but the time is off by 5 minutes.
0
 

Author Comment

by:fstinc
ID: 36570041
so it's automatic (the time service) by joining the computers to the domain?
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 6

Accepted Solution

by:
da3ve earned 500 total points
ID: 36570077
Yes it is automatic. Check the time on the domain PDC emulator. Ours was losing time for some reason and our corporate guys refused to configure external NTP for a few months. Once they did everything was fine.

http://technet.microsoft.com/en-us/library/cc786897%28WS.10%29.aspx


For a more in depth look at windows domain time:

http://technet.microsoft.com/en-us/library/cc773013%28WS.10%29.aspx
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36570103
The default maximum time difference allowed is only 5 minutes so you would be unable to access the domain.

Better to fix the problem that the PDC Emulater is just not syncing externaly. Takes 5 mins to fix and then your sorted for life :D
0
 

Author Comment

by:fstinc
ID: 36570236
ok am confused. looks like the server is configured correctly. i get the right time from multiple NTP servers. However, my computer (not joined to domain) and my cell phone have a different time 4-5 mins difference.  what is the correct time???
0
 
LVL 6

Expert Comment

by:da3ve
ID: 36570308
Your phone should have an option to get time from the cell network. I would verify that setting first.

You can verify the current time at time.gov.

http://time.gov/

I would compare that to your PDC time. If the server is at or near the correct time +/- 10 seconds, the rest of the domain should be synchronizing to it automatically via the w32time service. The reason is Kerberos (which is used to grant access to domain resources) is time dependent for security reasons as mentioned above by Neilsr.) The domain doesn't care what the "actual" time is, but it does need the time inside the domain to be synchronized.

For your non-domain machine, it may or may not be configured to use NTP. You will have to configure it to use NTP or join it to the domain.

An AD DS forest has a predetermined time synchronization hierarchy. The Windows Time service synchronizes time between computers within the hierarchy, with the most accurate reference clocks at the top. If more than one time source is configured on a computer, Windows Time uses NTP algorithms to select the best time source from the configured sources based on the computer’s ability to synchronize with that time source. The Windows Time service does not support network synchronization from broadcast or multicast peers.
http://technet.microsoft.com/en-us/library/cc773013%28WS.10%29.aspx

0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question