Time Problem Events ID 12 On the PDC Windows 2008 R2

I have a problem with time synchronization on a Windows Server 2008 R2 as a PDC.
Initially I used the Goup Policy (Winodws Time Services) but after,reading some blogs, I changed this configuration with the one proposed by microsoft htp://support.microsoft.com/kb/816042
I tried it with manual solution and hotfix solution but No way!
I tried with dns (ntp1.irinm.it,0x1) and with IP,
I verified that the client protocol used was NTP, but no way.
Every time the advice, proposed by the event viewer, is ID 12 (W32 Time Time Provider NtpClient: This machine is configured to use {text omitted}, but it is the PDC emulator...)
I verified that the traffic for port 123 is been opened by the firewall.
What can I try?
Where am I doing wrong?
Thank you and good day
stefanop67Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

stefanop67Author Commented:
If a try to do the w32tm /monitor,
this one is the answer:
The reverse name resolution is maximum effort.
It cannot be correct, since the field RefID of the packages date and time is not uniform in the different NTP implementations and may not use IP addresses.                                                                  

    NTP: +0.0269403s         RefID: nameserver (PDC) [xx.xx.xx.xx]
    NTP: +0.0000000s         RefID: 'LOCL' [0x4C434F4C]
These one proposed are te 2 parameters for RefID in the log
0
SommerblinkCommented:
Is HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type set to NTP?

Also, can you provide the output from the command on this server: w32tm /query /configuration
0
stefanop67Author Commented:
Yes is set to NTP

Here the output of w32tm /query /configuration

[Configurazione]
EventLogFlags: 2 (Locale)
AnnounceFlags: 5 (Locale)
TimeJumpAuditOffset: 28800 (Locale)
MinPollInterval: 6 (Locale)
MaxPollInterval: 10 (Locale)
MaxNegPhaseCorrection: 172800 (Locale)
MaxPosPhaseCorrection: 172800 (Locale)
MaxAllowedPhaseOffset: 300 (Locale)
FrequencyCorrectRate: 4 (Locale)
PollAdjustFactor: 5 (Locale)
LargePhaseOffset: 50000000 (Locale)
SpikeWatchPeriod: 900 (Locale)
LocalClockDispersion: 10 (Locale)
HoldPeriod: 5 (Locale)
PhaseCorrectRate: 7 (Locale)
UpdateInterval: 100 (Locale)

[Provider servizi orari]
NtpClient (Locale)
DllName: C:\Windows\system32\w32time.DLL (Locale)
Enabled: 1 (Locale)
InputProvider: 1 (Locale)
CrossSiteSyncFlags: 2 (Criterio)
AllowNonstandardModeCombinations: 1 (Locale)
ResolvePeerBackoffMinutes: 15 (Criterio)
ResolvePeerBackoffMaxTimes: 7 (Criterio)
CompatibilityFlags: 2147483648 (Locale)
EventLogFlags: 0 (Criterio)
LargeSampleSkew: 3 (Locale)
SpecialPollInterval: 3600 (Criterio)
Type: NT5DS (Criterio)
NtpServer (Locale)
DllName: C:\Windows\system32\w32time.DLL (Locale)
Enabled: 1 (Locale)
InputProvider: 0 (Locale)
AllowNonstandardModeCombinations: 1 (Locale)
VMICTimeProvider (Locale)
DllName: C:\Windows\System32\vmictimeprovider.dll (Locale)
Enabled: 1 (Locale)
InputProvider: 1 (Locale)
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

stefanop67Author Commented:
I tried to see on the DC, of my LAN, what time server was used and this one is the answer

Getting DC list for default domain...
Analyzing:  1 -- (0 of 2)
resolving referer (internal IP) (1 of 2)...
resolving referer 76.79.67.76 (2 of 2)...
                                                                     
DCServer [Internal IP]:
    ICMP: 0ms delay.
    NTP: -0.0072159s offset from PDCServer
        RefID: PDCServer [Internal IP]
PDCServer *** PDC *** [Internal IP]:
    ICMP: 0ms delay.
    NTP: +0.0000000s offset from PDCServer
        RefID: 'LOCL' [76.79.67.76]

Well this second IP [76.79.67.76] and is very strange, not corrisponding to the External Time servers [193.204.114.232 and 233] that I've configurated on my PDCServer.
I investigated about the owner of its and is "time warner cable internet llc"!
Where this IP could be and why???
0
SommerblinkCommented:
I'm not certant, as I don't speak what Google has identified as Italian... (sorry, nothing better, so I hope it wasn't wrong).

Here is the problem that I see:

[Provider servizi orari]
[...]
Type: NT5DS (Criterio)

I suspect that Criterio means "Policy", as in Group Policy?

If this is the case, then your hardcoded changes are being overruled by Group Policy. A lot of times this is located in the Default Domain Policy, but could be anywhere.

You can likely safely get rid of that policy within the Default Domain Policy, as domain members by default look to the PDCe as their time source.

Let me know if this helps.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
stefanop67Author Commented:
Yes!!!
Was a group policy for domain!!
Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.