• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 720
  • Last Modified:

Time Problem Events ID 12 On the PDC Windows 2008 R2

I have a problem with time synchronization on a Windows Server 2008 R2 as a PDC.
Initially I used the Goup Policy (Winodws Time Services) but after,reading some blogs, I changed this configuration with the one proposed by microsoft htp://support.microsoft.com/kb/816042
I tried it with manual solution and hotfix solution but No way!
I tried with dns (ntp1.irinm.it,0x1) and with IP,
I verified that the client protocol used was NTP, but no way.
Every time the advice, proposed by the event viewer, is ID 12 (W32 Time Time Provider NtpClient: This machine is configured to use {text omitted}, but it is the PDC emulator...)
I verified that the traffic for port 123 is been opened by the firewall.
What can I try?
Where am I doing wrong?
Thank you and good day
  • 4
  • 2
1 Solution
stefanop67Author Commented:
If a try to do the w32tm /monitor,
this one is the answer:
The reverse name resolution is maximum effort.
It cannot be correct, since the field RefID of the packages date and time is not uniform in the different NTP implementations and may not use IP addresses.                                                                  

    NTP: +0.0269403s         RefID: nameserver (PDC) [xx.xx.xx.xx]
    NTP: +0.0000000s         RefID: 'LOCL' [0x4C434F4C]
These one proposed are te 2 parameters for RefID in the log
Is HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type set to NTP?

Also, can you provide the output from the command on this server: w32tm /query /configuration
stefanop67Author Commented:
Yes is set to NTP

Here the output of w32tm /query /configuration

EventLogFlags: 2 (Locale)
AnnounceFlags: 5 (Locale)
TimeJumpAuditOffset: 28800 (Locale)
MinPollInterval: 6 (Locale)
MaxPollInterval: 10 (Locale)
MaxNegPhaseCorrection: 172800 (Locale)
MaxPosPhaseCorrection: 172800 (Locale)
MaxAllowedPhaseOffset: 300 (Locale)
FrequencyCorrectRate: 4 (Locale)
PollAdjustFactor: 5 (Locale)
LargePhaseOffset: 50000000 (Locale)
SpikeWatchPeriod: 900 (Locale)
LocalClockDispersion: 10 (Locale)
HoldPeriod: 5 (Locale)
PhaseCorrectRate: 7 (Locale)
UpdateInterval: 100 (Locale)

[Provider servizi orari]
NtpClient (Locale)
DllName: C:\Windows\system32\w32time.DLL (Locale)
Enabled: 1 (Locale)
InputProvider: 1 (Locale)
CrossSiteSyncFlags: 2 (Criterio)
AllowNonstandardModeCombinations: 1 (Locale)
ResolvePeerBackoffMinutes: 15 (Criterio)
ResolvePeerBackoffMaxTimes: 7 (Criterio)
CompatibilityFlags: 2147483648 (Locale)
EventLogFlags: 0 (Criterio)
LargeSampleSkew: 3 (Locale)
SpecialPollInterval: 3600 (Criterio)
Type: NT5DS (Criterio)
NtpServer (Locale)
DllName: C:\Windows\system32\w32time.DLL (Locale)
Enabled: 1 (Locale)
InputProvider: 0 (Locale)
AllowNonstandardModeCombinations: 1 (Locale)
VMICTimeProvider (Locale)
DllName: C:\Windows\System32\vmictimeprovider.dll (Locale)
Enabled: 1 (Locale)
InputProvider: 1 (Locale)
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

stefanop67Author Commented:
I tried to see on the DC, of my LAN, what time server was used and this one is the answer

Getting DC list for default domain...
Analyzing:  1 -- (0 of 2)
resolving referer (internal IP) (1 of 2)...
resolving referer (2 of 2)...
DCServer [Internal IP]:
    ICMP: 0ms delay.
    NTP: -0.0072159s offset from PDCServer
        RefID: PDCServer [Internal IP]
PDCServer *** PDC *** [Internal IP]:
    ICMP: 0ms delay.
    NTP: +0.0000000s offset from PDCServer
        RefID: 'LOCL' []

Well this second IP [] and is very strange, not corrisponding to the External Time servers [ and 233] that I've configurated on my PDCServer.
I investigated about the owner of its and is "time warner cable internet llc"!
Where this IP could be and why???
I'm not certant, as I don't speak what Google has identified as Italian... (sorry, nothing better, so I hope it wasn't wrong).

Here is the problem that I see:

[Provider servizi orari]
Type: NT5DS (Criterio)

I suspect that Criterio means "Policy", as in Group Policy?

If this is the case, then your hardcoded changes are being overruled by Group Policy. A lot of times this is located in the Default Domain Policy, but could be anywhere.

You can likely safely get rid of that policy within the Default Domain Policy, as domain members by default look to the PDCe as their time source.

Let me know if this helps.
stefanop67Author Commented:
Was a group policy for domain!!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now