[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Windows Server 2003 time is syncing with both PDC and Internet time

Posted on 2014-08-11
5
Medium Priority
?
400 Views
Last Modified: 2014-08-19
Hi.
We have 8 servers, all of them sync with a domain controller "DMC1".  

However, one of the servers (a Server 2003 machine) is also syncing with the Internet directly (at one of Microsoft's Time Servers), on it's own.   So every 5 minutes, it syncs with the Internet and is then off by a minute.  THEN, a minute or so later, the server syncs as it should with DMC1.

I assume I just need to "turn off" the syncing with the Internet on that one server, and all will be good.
Does anyone think that's the solution, and how do I turn off Internet time syncing?

Thanks
Rob
0
Comment
Question by:Rob Rudloff
  • 2
  • 2
5 Comments
 
LVL 23

Assisted Solution

by:Thomas Grassi
Thomas Grassi earned 1600 total points
ID: 40253361
On that server what is showing at this registry entry?

Windows Time                                    

HKLM>System>CurrentControlSet>Services>W32Time>Parameters
0
 
LVL 10

Assisted Solution

by:Pramod Ubhe
Pramod Ubhe earned 400 total points
ID: 40253412
w32tm /query /status
this command will give you very useful information on current NTP client settings/status.

some additional information -
http://support.microsoft.com/kb/884776
0
 

Accepted Solution

by:
Rob Rudloff earned 0 total points
ID: 40253525
After some research, we looked at that setting you mentioned.  We saw that:
     HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer

was set to 2 time servers:   "10.9.8.5,0x1 time.windows.com,0x1"
We took off the  "time.windows.com,0x1" part and it seems to be working so far.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 40253596
Rob

Yes that's where I always look at when the time service is not working.

Glad to point you to the correct spot.
0
 

Author Closing Comment

by:Rob Rudloff
ID: 40269770
Ultimately, the registry key to inspect is:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer
which will include a list of all time servers that the server is sync'ing with (listed by name or IP, each separated by a space).
For example:
    "10.9.8.5,0x1 time.windows.com,0x1"
seems to tell the server to sync with 2 time servers (which was bad, in our case, since the two were so far off each other).
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Here's a look at newsworthy articles and community happenings during the last month.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question