cargex
asked on
Windows Server 2012 running on VMware time syncronization ntp
Hi Guys,
I have a Windows Server 2012 PDC running on VMware vSphere 6, brand new installation, first in the forest.
I'm getting a warning message (see below) but I'm confused because in the olden days I would just force the server to synchronize with some stratum 2 servers somewhere in the Internet.
But now that the server is a virtual machine, I have read that the Windows Server is synchronizing its time with VMware, I don't know about that.
What is the b est way to deal with this warning?
Log Name: System
Source: Microsoft-Windows-Time-Ser
Date: 7/28/2015 3:38:41 PM
Event ID: 12
Task Category: None
Level: Warning
Keywords:
User: LOCAL SERVICE
Computer: MYCOMPUTER.domain.local
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
I have a Windows Server 2012 PDC running on VMware vSphere 6, brand new installation, first in the forest.
I'm getting a warning message (see below) but I'm confused because in the olden days I would just force the server to synchronize with some stratum 2 servers somewhere in the Internet.
But now that the server is a virtual machine, I have read that the Windows Server is synchronizing its time with VMware, I don't know about that.
What is the b est way to deal with this warning?
Log Name: System
Source: Microsoft-Windows-Time-Ser
Date: 7/28/2015 3:38:41 PM
Event ID: 12
Task Category: None
Level: Warning
Keywords:
User: LOCAL SERVICE
Computer: MYCOMPUTER.domain.local
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
John
Be sure you install VMware Tools in the guest machine. In Tools there is Time Synchronization function and you can sync the time in the guest to the time in the host machine.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It's never a good idea to have two services (W32time and VMWare time sync) manage the clock together.
So - as told before - you should disable the VMware time sync.
Furthermore, I've experienced enough trouble with W32time to avoid using it whenever I can.
My recommendation:
Use a Windows port of the classic *ix NTP service. The classic NTP service software is free. Easy to install and configure, works like a charm and is stable as a rock. And it is nicer when it comes to one of the rare cases of troubleshooting.
See this article for the "How To".
So - as told before - you should disable the VMware time sync.
Furthermore, I've experienced enough trouble with W32time to avoid using it whenever I can.
My recommendation:
Use a Windows port of the classic *ix NTP service. The classic NTP service software is free. Easy to install and configure, works like a charm and is stable as a rock. And it is nicer when it comes to one of the rare cases of troubleshooting.
See this article for the "How To".
ASKER
Thanks guys!