• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 296
  • Last Modified:

Time discrepancy between member servers and domain controllers

Hello Windows Server Experts,

I have a strange problem that I'm having a hard time with.  The environment I work in has approximately 40 servers (both physical and virtual servers).  I have four servers, 2 physical and 2 virtual , that the clocks get out of sync with our domain controllers by exactly 2 minutes.  I have checked network connections and those look good.  I have verified the virtual servers are not syncing with their hosts and not domain controllers.  Any ideas of what I'm missing.  The time discrepancy never grows more or less than 2 minutes.

Thanks,
Nick
0
ndalmolin_13
Asked:
ndalmolin_13
1 Solution
 
Will SzymkowskiSenior Solution ArchitectCommented:
I would try the following...
- resync the time on the servers and using (w32tm /resync)
Let the clocks resync to the DC time and monitor this to ensure that it does not fall back 2 minutes behind again.

- on the servers in question run "set logonserver" and see what DC the machines are authenticating to.

A common reason for time sync issues is due to the trust between the domain and the computer have been broken. You can use the netdom command to verify the trust.

netdom verify machineName /Domain:domain.com /UserO:Username /PasswordO:password

This will verify the connection. If this comes back successful sometimes it is a false positive and the server might been to be removed and then re-added back to the domain. I would start with the resyncing of the time.

Will.
0
 
Manjunath SulladTechnical ConsultantCommented:
Cross verify the some of the registry keys from below path,

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\


Refer registry keys from below link,

http://www.aperture.ro/index.php/2009/01/windows-time-sync-hyper-v-enabled-domain-controller-dilemma/
0
 
compdigit44Commented:
Are the servers that get out of sync VM's? If so check to make sure the VM are not set to sync there time with the host. AD joined clients and servers should sync with the AD PDC server. Also on your VMware host check the date and time in the bios
0
 
ndalmolin_13Author Commented:
I've been out sick, so I'm just getting back to this.  Some of the servers are physical and some of them are virtual.  We also have a few workstations that off by two minutes.  Thanks for your participation in this.
0
 
compdigit44Commented:
On your Forest root PDC set the server to update it's time from an internet source.

w32tm /config /manualpeerlist:"ServerName" /reliable:yes /update

Your member servers & clients will pickup the new time when they are reboot or you force the time update using w32tm
0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now