Link to home
Start Free TrialLog in
Avatar of Albert Widjaja
Albert WidjajaFlag for Australia

asked on

Entering the NTP external source in PDC Emulator DC role

What is the best practice in putting in the external time source for the PDC emulator which serves as the NTP server for all the workstations & servers in Active Directory domain ?

Since all of my users are spread across different timezones and all of my servers are in Australia, I wonder if I should select the following list of NTP:

server 0.au.pool.ntp.org
         server 1.au.pool.ntp.org
         server 2.au.pool.ntp.org
         server 3.au.pool.ntp.org

over the following random list of NTP below:
Name:    host-24-56-178-140.beyondbb.com
Address:  24.56.178.140

Name:    64.147.116.229.static.nyinternet.net
Address:  64.147.116.229

Name:    nist1-lv.ustiming.org
Address:  64.250.229.100

and lastly how am I suppose to type in the value in the following registry entry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameter\
Type: NTP
NtpServer:.....

Open in new window


shall I type in the FQDN of the NTP pool above or the first line of the IP address returned from the:
nslookup 0.au.pool.ntp.org
nslookup 1.au.pool.ntp.org
nslookup 2.au.pool.ntp.org
nslookup 3.au.pool.ntp.org

above ?
SOLUTION
Avatar of VB ITS
VB ITS
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Albert Widjaja

ASKER

Thanks VB, that does make sense after all.

as for the flag, can I just specify like below:

0.au.pool.ntp.org,0x1 1.au.pool.ntp.org,0x1 3.au.pool.ntp.org,0x2 4.au.pool.ntp.org,0x2

would that be acceptable ?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Mahesh,

So in this case I can just use the w32tm command line without worrying / confused myself about typing the hex flag values to the registry key?

w32tm /config /manualpeerlist:"0.au.pool.ntp.org 1.au.pool.ntp.org 3.au.pool.ntp.org 4.au.pool.ntp.org" /syncfromflags:manual /reliable:yes /update

Would that be good enough ?

do I have to do the following registry entry changes as well ?
Registry screenshot
Thanks VB, that does make sense after all.

as for the flag, can I just specify like below:

0.au.pool.ntp.org,0x1 1.au.pool.ntp.org,0x1 3.au.pool.ntp.org,0x2 4.au.pool.ntp.org,0x2

would that be acceptable ?
Yep that will work perfectly fine. Just realised I forgot 2.au.pool.ntp.org in that list though :)
ah yes, the more the merrier :-)

is there any caveats or drawback if I put the NTP Pool FQDN rather than the IP Address ?
I'm still wondering which format to choose for the best performance.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Use the FQDN as I believe the ntp.pool.org servers are setup in round-robin DNS, which means the IP address can vary each time you resolve it. This is mainly done for redundancy purposes.

Whilst the 0x1, 0x2, etc. flags aren't compulsory, they are good to have as it determines how your NTP server should react if one of the time sources is unreachable. The flags can also be used to dictate how often it should poll the time source.  For instance if you have a Special Poll Interval set but don't append the time source with 0x1 then the Special Poll Interval doesn't take affect.

They are there to give you more fine-grained control over your NTP server.
ok, so I have executed the command:

w32tm /query /source
w32tm /query /status

Open in new window


in the new domain controller VM, but somehow the result is not showing on the PDC emulator role ?
where and how to check the setting which overrides the default PDC emulator role as the definitive NTP ?
How did you configure the NTP server settings? Group Policy or via the registry on your PDC?
This is the thing that I don't know yet.

I'm newly joined to this company and all of the server seems to get their time synch from various different source and I need to standardize it.
This is the only entry that I can found so far from the Windows Server 2003 which currently running as the PDC Emulator role:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"type"="NTP"
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=C:\WINNT\system32\w32time.dll
"NtpServer"="24.56.178.140 64.147.116.229 64.250.229.100"

Open in new window


why is that the server in the domain not getting the time synched from this one server consistently ?

The domain is one single domain in the forest.
Windows Server 2003 Functionality and Domain level.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This is the only entry that I can found so far from the Windows Server 2003 which currently running as the PDC Emulator role:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"type"="NTP"
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=C:\WINNT\system32\w32time.dll
"NtpServer"="24.56.178.140 64.147.116.229 64.250.229.100"

why is that the server in the domain not getting the time synched from this one server consistently ?

The domain is one single domain in the forest.
Windows Server 2003 Functionality and Domain level.
I can see you've opened a new EE question for this. Do you want to close this question since your original query has been answered and we pick it up in your other EE question?
Thanks Guys.