Windows Time - Conflicting DCs

Posted on 2013-09-10
Medium Priority
Last Modified: 2013-09-10

I am battling within my windows environment to set the correct time across all clients and servers. I believe that I have two conflicting domain controllers issuing the times to request.

On DC1 which is the PDC emulator it is set to receive its time from an external time source (Verizon NTP UK).

On DC2 it receives its time from the free-running system clock, this is the faulting server which lags 6 minutes behind.

I've been able to work this out by running w32tm /query /status on each domain controller.

From what I've seen most of the clients and servers are pulling its time from DC1 correctly apart from an odd few that pull from DC2. For Example on Server1, Its 6 minutes behind. I run "net time" and it returns "Current Time at \\dc1 is XX (correct time)" Yet it isn't according to the time in the task bar. To find out where it's really pulling the time from, I run w32tm /query /status on Server1 and it returns telling me its pulling time from DC2 - so no wonder its wrong!

Can anybody help me please to change DC2 to the right time and force a resync throughout the faulting servers?

We are running Windows server 2008.

Thank you
Question by:Auckland
LVL 19

Accepted Solution

Miguel Angel Perez Muñoz earned 664 total points
ID: 39479232
Try with this command:

NET TIME /domain:your_domain /SET /Y

Then, restart time service.

Author Comment

ID: 39479241

Should I run this on DC2, and restart the time service on DC2 after also?
LVL 25

Assisted Solution

by:Mohammed Khawaja
Mohammed Khawaja earned 668 total points
ID: 39479298
Best practice for time configuration is as follows:

1.  Root domain PDC emulator should sync time with an outside trusted time server
2.  All other DCs will by default sync time with Root DC PDC Emulator
3.  If DCs are virtualized then ensure to have hypervisor servers sunch wiht root DC PDC emulator or stop syncing virtual DC time with host server
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 39479401
Yes, on affected DC.

Consider post of mnkhawaja, point 3 is important, disable on tools sync hypervisor time with virtual machine.
LVL 13

Assisted Solution

Jaihunt earned 668 total points
ID: 39479720
Check the below link


In DC2 check the registry value HKLM > System > CurrentControlSet > services > W32Time > Parameters->type -> NT5DS


Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

In this post, we will learn to set up the Group Naming policy and will see how it is going to impact the Display Name and the Email addresses of the Group.
After a recent Outlook migration from a 2007 to 2010 environment, some issues with Distribution List owners were realized. In this article, I explain how that was rectified.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question