Avatar of miketech99
miketech99
Flag for United States of America asked on

Time is off on server

I have a windows 2008 server joined to a domain that had its time off by 5 minutes.  I restarted the server and now appears the time is off by 40 seconds but seems to increase in time difference.

The server is assigned a static IP address; however DHCP on DC1 has 042 NTP Server configured in the server and scope options.  DC2 does not have these DHCP configured.  DC1 NTP Servers in DHCP has 192.168.101.7 and 101.8.   Is it OK for NTP to not be configured in DHCP on DC2 but configured on DC1?

If I execute w32tm /monitor on any domain computer is shows the same settings which are:
C:\Windows\system32>w32tm /monitor
xx-xxxx-DC1.corp.local *** PDC ***[192.168.101.7:123]:
    ICMP: 0ms delay
    NTP: +0.0000000s offset from xx-xxxx-DC1.corp.local
        RefID: clock.team-cymru.org [38.229.71.1]
        Stratum: 3
xx-xxxx-DC2.corp.local[192.168.101.8:123]:
    ICMP: 0ms delay
    NTP: +0.0303650s offset from xx-xxxx-DC1.corp.local
        RefID: grom.polpo.org [65.19.178.219]
        Stratum: 3

How can I verify all computers on the domain are retrieving the same time from the domain controller?
How can I verify the domain controller is retrieving time from a reliable source other than time.windows.com?
On all the computers on the network, time.windows,0x9 is shown for NTPServer in the registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\Parameters.  Shouldn't it rather point to one of the domain controllers?

Thanks for any advice.
Microsoft Server OSWindows 7Windows Server 2008

Avatar of undefined
Last Comment
miketech99

8/22/2022 - Mon
AustinComputerLabs

AustinComputerLabs

miketech99

ASKER
Failed response.  First, I had particular questions. Second, you are referencing Server 2003 in your EE solution link.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
archerslo

RE: your second question:

How to synchronize an internal time server with an external source

Click Start, point to All Programs, point to Accessories, and then click Command Prompt.
 
 Type the following line, where peerlist is a space-separated list of Domain Name System (DNS) names or IP addresses of the appropriate time sources, and then press ENTER:
    w32tm /config /syncfromflags:manual /manualpeerlist:peerlist
 
 Type w32tm /config /update, and then press ENTER.
AustinComputerLabs

The answer to your first question "How can I verify all computers on the domain are retrieving the same time from the domain controller? "
Is to set up an authoritative time server on your domain.

The answer to the second question in the 2003 documentation is still valid for 2008:
Make sure you have your new PDC is configured to sync with a reliable external time source. Restart the W32time service on the old FSMO role holder. You can also try running this command NET TIME /SETSNTP:SERVERNAME
miketech99

ASKER
authoritative time server on DC1 and DC2 are setup.  Time on one server though is more than 40 seconds off.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
ASKER CERTIFIED SOLUTION
DrDave242

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
miketech99

ASKER
Thanks Dave for the response and information.
The PDC emulator has the correct time. No servers are virtualized.

This morning my own system time is off by a minute.  The DCs show  the correct time and several other workstations have  the correct time too.  This has happened before to one other workstation but after the user restarted the time was normal.

All DC1 and DC2 the Type shows NTP and the NTPserver is 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org.
The workstations and a few servers I logged into has NTD5 for the type.  

What could cause one or multiple workstations to become out of sync and what will fix computers from not matching the time on PDC, such as the one workstation I'm using?
DrDave242

On your system (or one of the others that's off by a minute), run w32tm /query /source to find out which machine they're getting time from, then check that machine to see whether it's also off.
miketech99

ASKER
It returns "Free-running System Clock"
Other computers on the domain display either DC1 or DC2 as the time source.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
SOLUTION
DrDave242

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
miketech99

ASKER
Ok that fixed this workstation.  I checked the other workstations and they appeared to be pointing to either one of the domain controllers for time.
miketech99

ASKER
I noticed DC2 was using the source as 1.pool.ntp.org.  DC1 was setup to retrieve from 1.us.pool.ntp.org.

Slightly different sources.  Is it recommended to retrieve the time from DC1 for DC2 since DC1 is the PDC?
SOLUTION
DrDave242

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
miketech99

ASKER
On the non-PDC I ran w32tm /config /computer:<computer> /syncfromflags:DOMHIER /Update  to sync with PDC.  Thanks Dave for all your assistance!
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.