Windows XP Time Syncs Backwards

Hey Experts,

I have a Windows XP Pro machine that is joined to a domain and it keeps changing its time back an hour or two. If I change it to the correct time...within a couple of hours, it will change the time back again. But it isn't the same time every time...sometimes its 1 hour and other times 2 hours.

 I checked the XP's time settings and everything is correct...time, date, time zone. I also checked the domain controller's, Windows Server 2008 R2, time, date, time zone and that is correct too. I have tried removing and rejoining the domain...any ideas? Is there a command to check to see what it is syncing to?

Let me know if you have any questions!

Thanks!
itadminnekAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Thomas GrassiSystems AdministratorCommented:
Check the registry setting for time

use these settings

Windows Time      
                              
HKLM>System>CurrentControlSet>Services>W32Time>Parameters                                    
NTPServer      10.239.129.15   ( ip address of your server here)                              
Type      NTP

Also make sure the windows time service is started and set to automatic
0
itadminnekAuthor Commented:
The register location was set to time.windows.com...so I changed it to my domain controllers IP and restart the Windows Time service.

We will see what happens...

Anything else I can check out in the meantime?
0
Thomas GrassiSystems AdministratorCommented:
If you make the changes in the  registry as noted it should work been using that method for a long time and never had an issue.

Keep an eye on it after the restart

You can just do a stop and start of the w32time service also

Check the event log you will see the time events logged they will tell you what the computer is syncing with.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

web_trackerComputer Service TechnicianCommented:
Make sure the time zone is setup correctly for your system and day light savings time is active.
0
itadminnekAuthor Commented:
Well I just checked it this morning and the current actual time is 8:57 AM and the XP machine is showing 1:59 AM. The registry location I modified still shows the domain controller IP address I changed it to. I am going to run a virus scan just to be safe but I do not think that is the problem.

trgrassijr55 - I did restart to w32time service after making the change to the registry. That's another thing that is weird...I did take a look at the Event Viewer but it shows dates of the year 2028 on something and I can't find anything even close to this month. Is there a specific spot you can guide me to in the Event Viewer?
0
Thomas GrassiSystems AdministratorCommented:
Hi

In the system event log look for event id 7036

Have you checked the bios clock on this computer.

Boot up hit f8 go into the system bios see what the clock is set at

maybe the battery on the MB needs replacement
0
itadminnekAuthor Commented:
Hi trgrassijr55,

I put a different battery in the motherboard and also verified the system bios clock on start up and everything was correct...it is still go back an hour every so often. I didn't anything in the event viewer for event id 7036.

Any other ideas to check?
0
Thomas GrassiSystems AdministratorCommented:
lets run msconfig

in the startup tab disable all

in the services tab hide all Microsoft programs then disable all others

restart computer

lets see if something is conflicting first.
0
itadminnekAuthor Commented:
Hi trgrassijr55,

Well I disabled all startups and all non-Microsoft services and restarted the computer and after a couple hours it has gone back 2 - 3 hours...

Any other ideas?
0
Thomas GrassiSystems AdministratorCommented:
Sounding like a bad mother board


do a net time from a command prompt what do you get post results
0
web_trackerComputer Service TechnicianCommented:
By looking at all the work you have done, this is really stumping me. What happens if you leave the network cable unplugged over night?  Does the time roll back then?  If it only seems to roll back when it is connect to the network I would lean towards been a malware issue, I will try process explorer to see if there is something unusual running in the background. If after running malware scans and using process explorer does not resolve the issue, I would probably lean toward re-imaging the computer after backing it up.
0
itadminnekAuthor Commented:
trgrassijr55 - I did a net time and it comes back saying the current time on my domain controller which is the correct time and location for it to be pulling from.

web_tracker - I disabled the network on the computer and it still go back an hour every hour it seems...I don't think it is malware though because you can see earlier in this discussion...I ran a virus scan and found nothing

But at least we know it is the computer itself doing the time changes because the connection to the network was disabled,

Any other ideas?
0
Thomas GrassiSystems AdministratorCommented:
If you stop the windows times service then start it again does the time become correct?

in the event viewer check for the windows time events

http://technet.microsoft.com/en-us/library/cc756447(v=WS.10).aspx

http://technet.microsoft.com/en-us/library/cc756549(v=WS.10).aspx

check them out

If they show the correct info

I will create a script for you to run on the computer.
0
web_trackerComputer Service TechnicianCommented:
I would quit wasting your time and reimage the computer, you can spend literally hours trying to resolve this issue and not get anywhere. A back up and re-image is my recommendation.
0
itadminnekAuthor Commented:
I agree web tracker...that is what I am working on right now...
0
itadminnekAuthor Commented:
I ended up just reinstalling Windows on the machine and the issue is gone now...
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
web_trackerComputer Service TechnicianCommented:
I am wondering if it was some type of malware on your system that your scanning failed to detect. It was very strange. I am glad at least you got it working properly. I really had to scratch my head on that one.
0
itadminnekAuthor Commented:
It was what fixed that issue
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.