Time is off on server
I have a windows 2008 server joined to a domain that had its time off by 5 minutes. I restarted the server and now appears the time is off by 40 seconds but seems to increase in time difference.
The server is assigned a static IP address; however DHCP on DC1 has 042 NTP Server configured in the server and scope options. DC2 does not have these DHCP configured. DC1 NTP Servers in DHCP has 192.168.101.7 and 101.8. Is it OK for NTP to not be configured in DHCP on DC2 but configured on DC1?
If I execute w32tm /monitor on any domain computer is shows the same settings which are:
C:\Windows\system32>w32tm /monitor
xx-xxxx-DC1.corp.local *** PDC ***[192.168.101.7:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from xx-xxxx-DC1.corp.local
RefID: clock.team-cymru.org [38.229.71.1]
Stratum: 3
xx-xxxx-DC2.corp.local[192
ICMP: 0ms delay
NTP: +0.0303650s offset from xx-xxxx-DC1.corp.local
RefID: grom.polpo.org [65.19.178.219]
Stratum: 3
How can I verify all computers on the domain are retrieving the same time from the domain controller?
How can I verify the domain controller is retrieving time from a reliable source other than time.windows.com?
On all the computers on the network, time.windows,0x9 is shown for NTPServer in the registry key: HKEY_LOCAL_MACHINE\SYSTEM\
Thanks for any advice.
The server is assigned a static IP address; however DHCP on DC1 has 042 NTP Server configured in the server and scope options. DC2 does not have these DHCP configured. DC1 NTP Servers in DHCP has 192.168.101.7 and 101.8. Is it OK for NTP to not be configured in DHCP on DC2 but configured on DC1?
If I execute w32tm /monitor on any domain computer is shows the same settings which are:
C:\Windows\system32>w32tm /monitor
xx-xxxx-DC1.corp.local *** PDC ***[192.168.101.7:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from xx-xxxx-DC1.corp.local
RefID: clock.team-cymru.org [38.229.71.1]
Stratum: 3
xx-xxxx-DC2.corp.local[192
ICMP: 0ms delay
NTP: +0.0303650s offset from xx-xxxx-DC1.corp.local
RefID: grom.polpo.org [65.19.178.219]
Stratum: 3
How can I verify all computers on the domain are retrieving the same time from the domain controller?
How can I verify the domain controller is retrieving time from a reliable source other than time.windows.com?
On all the computers on the network, time.windows,0x9 is shown for NTPServer in the registry key: HKEY_LOCAL_MACHINE\SYSTEM\
Thanks for any advice.
Here is an EE solution:
https://www.experts-exchange.com/questions/23630502/Authoritative-Time-Server.html
https://www.experts-exchange.com/questions/23630502/Authoritative-Time-Server.html
ASKER
Failed response. First, I had particular questions. Second, you are referencing Server 2003 in your EE solution link.
RE: your second question:
How to synchronize an internal time server with an external source
How to synchronize an internal time server with an external source
Click Start, point to All Programs, point to Accessories, and then click Command Prompt.
Type the following line, where peerlist is a space-separated list of Domain Name System (DNS) names or IP addresses of the appropriate time sources, and then press ENTER:
w32tm /config /syncfromflags:manual /manualpeerlist:peerlist
w32tm /config /syncfromflags:manual /manualpeerlist:peerlist
Type w32tm /config /update, and then press ENTER.
The answer to your first question "How can I verify all computers on the domain are retrieving the same time from the domain controller? "
Is to set up an authoritative time server on your domain.
The answer to the second question in the 2003 documentation is still valid for 2008:
Make sure you have your new PDC is configured to sync with a reliable external time source. Restart the W32time service on the old FSMO role holder. You can also try running this command NET TIME /SETSNTP:SERVERNAME
Is to set up an authoritative time server on your domain.
The answer to the second question in the 2003 documentation is still valid for 2008:
Make sure you have your new PDC is configured to sync with a reliable external time source. Restart the W32time service on the old FSMO role holder. You can also try running this command NET TIME /SETSNTP:SERVERNAME
ASKER
authoritative time server on DC1 and DC2 are setup. Time on one server though is more than 40 seconds off.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks Dave for the response and information.
The PDC emulator has the correct time. No servers are virtualized.
This morning my own system time is off by a minute. The DCs show the correct time and several other workstations have the correct time too. This has happened before to one other workstation but after the user restarted the time was normal.
All DC1 and DC2 the Type shows NTP and the NTPserver is 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org.
The workstations and a few servers I logged into has NTD5 for the type.
What could cause one or multiple workstations to become out of sync and what will fix computers from not matching the time on PDC, such as the one workstation I'm using?
The PDC emulator has the correct time. No servers are virtualized.
This morning my own system time is off by a minute. The DCs show the correct time and several other workstations have the correct time too. This has happened before to one other workstation but after the user restarted the time was normal.
All DC1 and DC2 the Type shows NTP and the NTPserver is 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org.
The workstations and a few servers I logged into has NTD5 for the type.
What could cause one or multiple workstations to become out of sync and what will fix computers from not matching the time on PDC, such as the one workstation I'm using?
On your system (or one of the others that's off by a minute), run w32tm /query /source to find out which machine they're getting time from, then check that machine to see whether it's also off.
ASKER
It returns "Free-running System Clock"
Other computers on the domain display either DC1 or DC2 as the time source.
Other computers on the domain display either DC1 or DC2 as the time source.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok that fixed this workstation. I checked the other workstations and they appeared to be pointing to either one of the domain controllers for time.
ASKER
I noticed DC2 was using the source as 1.pool.ntp.org. DC1 was setup to retrieve from 1.us.pool.ntp.org.
Slightly different sources. Is it recommended to retrieve the time from DC1 for DC2 since DC1 is the PDC?
Slightly different sources. Is it recommended to retrieve the time from DC1 for DC2 since DC1 is the PDC?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
On the non-PDC I ran w32tm /config /computer:<computer> /syncfromflags:DOMHIER /Update to sync with PDC. Thanks Dave for all your assistance!
http://support.microsoft.com/kb/816042