Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 346
  • Last Modified:

Time problems with Windows Server 2008 R2 Foundation and clients

My server (PDC and only DC in forrest) runs 2 minutes fast. It also does not synchronize the clients. They are at various times (XP & Win 7).

What settings control this on the server and clients?
0
edison04
Asked:
edison04
  • 3
1 Solution
 
kevinhiggCommented:
The W32Time service manages the time sync functionality within modern Windows operating systems.  More detail is available here:

http://technet.microsoft.com/en-us/library/cc773263(v=ws.10).aspx

I would see what host your DC is configured to sync with (time.windows.com?), and verify that you can obtain the time from this source.  You should make sure that your DC is marked as authoritative, and then confirm that your clients are able to query time from the DC successfully.  Is this manifesting as auth problems?  Kerberos relies on a minimal time skew, so would expect that this gets to be a bigger issue if not resolved.  Is it possible that you have policy allowing your clients to sync elsewhere vs. the domain?  Best of luck!
0
 
edison04Author Commented:
Can you give me a little more detail on where to find these configs?:
1) what host my DC is configured to sync with ( where is this setting?)
2) DC is marked as authoritative (where is this?)

Not sure about manifestation as auth problems--does slowness count? We use 3 clients as login machines and the times are always different among the 3 and also compared to the DC. Like 2-5 minutes variation.

There is no other policy allowing sync elsewhere. It is a new server and I "configured" it and the clients. Some clients have to be rebooted to get the correct time, but lose it later.
0
 
edison04Author Commented:
I needed to sync to an external time source.

This page is more user-friendly:

http://technet.microsoft.com/en-us/library/cc784553.aspx

The server now has the right time and I will wait a day to see if the clients do.
0
 
edison04Author Commented:
The solution steered me in the right direction, but was not "dumbed down" enough for me.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now