I have a windows 2008 server joined to a domain that had its time off by 5 minutes. I restarted the server and now appears the time is off by 40 seconds but seems to increase in time difference.
The server is assigned a static IP address; however DHCP on DC1 has 042 NTP Server configured in the server and scope options. DC2 does not have these DHCP configured. DC1 NTP Servers in DHCP has 192.168.101.7 and 101.8. Is it OK for NTP to not be configured in DHCP on DC2 but configured on DC1?
If I execute w32tm /monitor on any domain computer is shows the same settings which are:
C:\Windows\system32>w32tm /monitor
xx-xxxx-DC1.corp.local *** PDC ***[192.168.101.7:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from xx-xxxx-DC1.corp.local
RefID: clock.team-cymru.org [38.229.71.1]
Stratum: 3
xx-xxxx-DC2.corp.local[192.168.101.8:123]:
ICMP: 0ms delay
NTP: +0.0303650s offset from xx-xxxx-DC1.corp.local
RefID: grom.polpo.org [65.19.178.219]
Stratum: 3
How can I verify all computers on the domain are retrieving the same time from the domain controller?
How can I verify the domain controller is retrieving time from a reliable source other than time.windows.com?
On all the computers on the network, time.windows,0x9 is shown for NTPServer in the registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\Parameters. Shouldn't it rather point to one of the domain controllers?
How to synchronize an internal time server with an external source
Click Start, point to All Programs, point to Accessories, and then click Command Prompt.
Type the following line, where peerlist is a space-separated list of Domain Name System (DNS) names or IP addresses of the appropriate time sources, and then press ENTER:
w32tm /config /syncfromflags:manual /manualpeerlist:peerlist
Type w32tm /config /update, and then press ENTER.
AustinComputerLabs
The answer to your first question "How can I verify all computers on the domain are retrieving the same time from the domain controller? "
Is to set up an authoritative time server on your domain.
The answer to the second question in the 2003 documentation is still valid for 2008:
Make sure you have your new PDC is configured to sync with a reliable external time source. Restart the W32time service on the old FSMO role holder. You can also try running this command NET TIME /SETSNTP:SERVERNAME
miketech99
ASKER
authoritative time server on DC1 and DC2 are setup. Time on one server though is more than 40 seconds off.
Thanks Dave for the response and information.
The PDC emulator has the correct time. No servers are virtualized.
This morning my own system time is off by a minute. The DCs show the correct time and several other workstations have the correct time too. This has happened before to one other workstation but after the user restarted the time was normal.
All DC1 and DC2 the Type shows NTP and the NTPserver is 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org.
The workstations and a few servers I logged into has NTD5 for the type.
What could cause one or multiple workstations to become out of sync and what will fix computers from not matching the time on PDC, such as the one workstation I'm using?
DrDave242
On your system (or one of the others that's off by a minute), run w32tm /query /source to find out which machine they're getting time from, then check that machine to see whether it's also off.
miketech99
ASKER
It returns "Free-running System Clock"
Other computers on the domain display either DC1 or DC2 as the time source.
http://support.microsoft.com/kb/816042