Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 357
  • Last Modified:

2008 Domain - System time is off

I have one subnet on my network with 60 computers, "2x Physical 2003 servers" and "5x 2008 R2 (VMWare) virtual servers".   One of the VM 2008R2 servers is the DC with FSMO roles and one older physical  2003 server is a second DC.  It is a 2008 domain.

The time on the  servers and workstations is 25 minutes slow from the real time.

How and where do I get the time straigtened out on the workstation and ALL the servers?  

Thank You
0
howmad2
Asked:
howmad2
1 Solution
 
Spyder2010Commented:
You can use the following article to configure time on your PDC Emulator, should be your 2008 DC that's holding the FSMO roles, assuming it's holding all of them.
http://technet.microsoft.com/en-us/library/cc786897(v=ws.10).aspx

Here is a list of external ntp servers to sync your PDC Emulator with.  Once the PDC Emulator is getting correct time from the NTP server, all of your other domain joined machines, servers and workstations, will use the PDC emulator for time.
http://support.ntp.org/bin/view/Servers/WebHome

FYI, you cannot have a 2008 domain while you still have 2003 domain controllers:
http://technet.microsoft.com/library/understanding-active-directory-functional-levels(WS.10).aspx
0
 
Imtiaz HashamTechnical Director / IT ConsultantCommented:
Your domain controller would work as a NTP Server.  Search for configuring the DC to use an external  NTP Server to get the correct time.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
howmad2Author Commented:
So I set the following on the "2008DC/FSMO" server..

      w32tm /config /manualpeerlist:”ntp1.fabrikam.com ntp.contoso.com  
      time.fineartschool.net” /reliable:yes /update

Since I have several servers and workstations, can I execute this command at any point in the day without creating a problem?  Is there anything I have to do on the  other servers and workstations to make them look to this server for time?

Thank You
0
 
Imtiaz HashamTechnical Director / IT ConsultantCommented:
i would follow this article for the DC:

http://support.microsoft.com/kb/816042

and ensure the PCs have the DC as the NTP Server using GPO.  Please ensure you do this on the GC first and if you want multiple time sync servers (because you have multiple DCs with the GC role) you can do that too.
0
 
Imtiaz HashamTechnical Director / IT ConsultantCommented:
what you are doing is:  instead of everyone going to the internet for time sync, they are going to the DC and it is checking itself against the atomic clocks.
0
 
howmad2Author Commented:
I ended up configuring my VMWARE hosts (esxi 5) with an external atomic clock.  Then went to each VM server and, from the systray, configured VMWARE TOOLS to use the host for time.  On any physical servers and workstations I restarted the Windows Time service OR rebooted the machines.
0
 
howmad2Author Commented:
This worked for me.  I m not sure if one of the other solutions would have worked as well.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now