Computers in domain time source: Free-running system clock. How to correct this?

Windows 2K8 domain. 2 DCs running Windows 2K8 32bit.
Users claimed incorrect time on computers. I ran the command "w32tm /query /source" on both DCs and a few workstations. The results were all the same: Free-running system clock
I supposed a workstation would sync with the DC and the DC would sync with an external time source. I am quite surprised that they are all at "free-running system clock"
What could be the cause for this?
How can I fix it?

Thanks!
LVL 1
Y YconsultantAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NVITCommented:
Is your Domain controller configured to an authoritative time server?
http://support.microsoft.com/kb/816042

http://blogs.msmvps.com/acefekay/2009/09/18/configuring-the-windows-time-service-for-windows-server/

Run the appropriate “Microsoft Mr Fix It” script by visiting it from each DC. You must visit it from each DC

For the DC with the FSMO Role, pick “Microsoft Fix It 50394,”
For the non-PDC Emulators, pick “Microsoft Fix It 50395.”
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Y YconsultantAuthor Commented:
From what I have carefully read in your first link
Configuring the Windows Time service to use an external time source - pick "50395"
Configuring the Windows Time service to use an internal time source - pick "50394"
So for my FSMO server, I should run "50395".
Please correct me if I am wrong
0
Y YconsultantAuthor Commented:
Here is what I do not understand
- FSMO server should sync with an external time source, why pickup 50394 ?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

NVITCommented:
Per http://blogs.msmvps.com/acefekay/2009/09/18/configuring-the-windows-time-service-for-windows-server/ scroll down to... On the new PDC Emulator AND on the non-PDC Emulators, go to http://support.microsoft.com/kb/816042. You will notice the “Microsoft Fix It” link. When you visit the link from the DC holding the PDC Emulator FSMO Role, it will show up as “Microsoft Fix It 50394,” and on the non-PDC Emulators, it will show up as “Microsoft Fix It 50395.”
0
Y YconsultantAuthor Commented:
Yes, I have read that part on Acefekay's blog. It did not explain why.
0
Y YconsultantAuthor Commented:
I am deeply studying the blog, it is "very" helpful and I have sensed it has the solution to my problem
0
NVITCommented:
Yes. The blog shows ways to either pick the Fix It links or do it manually
0
Y YconsultantAuthor Commented:
Here are the words at the very beginning on the blog
"I just wanted to make a statement regarding the time service registry entries. There really is NO need to modify the time service registry entries. The time service works by default, out of the box. The only thing that’s recommended to do, is synchronize the PDC Emulator in the forest root domain to a reliable outside source. That’s it."

"If you’ve experimented changing time settings to unknowlingly avert default behavior, you can set the time settings back to default:
1. On the DC that you’re experiencing issues with, run the following in a command prompt:
◾ net stop w32time
◾ w32tm /unregister
◾ w32tm /register
◾ net start w32time
2. On the Server in question (whether it’s the PDC Emulator or another server), run the following in a command prompt:
◾“net time /setsntp: ” (Note the blank space prior to the end “)  [This tells the client (whether a DC or workstation) to delete the current registry settings for time and use default settings.]
◾Restart the time service:  Net stop w32time && net start w32time
3. On the PDC Emulator run the following in a command prompt:
◾W32tm /config /manualpeerlist:time.nrc.ca /syncfromflags:manual /reliable:yes /update
◾ W32tm /resync /rediscover
◾Restart the time service: net stop w32time && net start w32time
4. On each DC that are not holding the PDC Emulator role, run the following in a command prompt:
◾w32tm /config /syncfromflags:domhier /update
◾ W32tm /resync /rediscover
◾Restart the time service: net stop w32time && net start w32time

After following the above steps 1~4, I verified the time source on DCs and a workstation by running "w32tm /query /source". The FSMO DC is syncing with an external source, the non-FSMO DC and the workstation are syncing with the FSMO DC.

So all is good now.

Thanks again :-)
0
NVITCommented:
Thanks for your responses. Glad you got it working, techcity. Now you can rest? 8-)
0
Y YconsultantAuthor Commented:
Well, as an IT support, work has never ended. Now I am working on a Hyper-V issue.
0
NVITCommented:
I know what you mean. Especially when the **** hits the fan! Take care.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.