Windows 7 time slowly changes

I have a 2012 domain with Windows 7 clients.  Suddenly one client is having trouble syncing the time - at startup one day it was about 3 hours off.  The timezone was set correctly.  I've tried running "net time /RTSDOMAIN:domain /SET" and it syncs the client time to the PDC's time immediately, but after a while the clock starts to slow down again.  Over the course of an hour it will get several minutes behind.  This seems to be the only client with the issue.  It's not a new client, has been running correctly for more than a year, and I'm unaware of any changes that could have caused this.
fallriverelectricAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

h1r0Commented:
Is the windows client a VM?
0
fallriverelectricAuthor Commented:
Yes.
0
h1r0Commented:
You may be dealing with Vm time skew.  Run this command:  w32tm /query /source  and let me know what you get back.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

fallriverelectricAuthor Commented:
That returns the name of the PDC.
0
h1r0Commented:
Ok - assuming this DC is the Operations manager and therefor the authoritative Time source.  Run the same query on the DC and let me know what you get.
0
fallriverelectricAuthor Commented:
That returns 1.us.pool.ntp.org.
0
h1r0Commented:
Ok so you are using NTP - good.  What is your hypervisor?
0
fallriverelectricAuthor Commented:
VMware.
0
h1r0Commented:
Are the vmware host(s) configured for NTP?
0
h1r0Commented:
Also is time sync configured for the vmware guest in question?
0
fallriverelectricAuthor Commented:
This may be the issue...we just added a new (3rd) host and it looks like it is not configured for NTP.  However, it seems odd that host 1 says "running" and lists the IPs of two DCs, but host 2 says the NTP client is "stopped" and still lists the IPs of two DCs.  Then this new host 3 says "stopped" and doesn't list any IPs.  I would think all 3 should be running?  (It makes sense that the 3rd one hasn't yet been configured, but I am puzzled about why both of the original hosts aren't running)
0
fallriverelectricAuthor Commented:
As far as time sync being configured for the guest, can you tell me where to check that?
0
h1r0Commented:
In any case in your environment you should configure your time services as follows:

1. ESX hosts configured to external time source (NTP)

2. DC operations master configured to the same external time source as the ESX host

3. VMware Tools Sync time should be disabled for all guests
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
h1r0Commented:
I think its still in  Virtual Machine –> Edit Settings –> Options –> VMware Tools
0
fallriverelectricAuthor Commented:
Ok, so I need to change the hosts to point to the same NTP server as the DC.  And all 3 hosts should have NTP enabled?
0
h1r0Commented:
Yes
0
fallriverelectricAuthor Commented:
It looks like time sync is enabled...I guess I don't understand why this should be disabled?
0
h1r0Commented:
3.3 Time Synchronization
Proper and accurate timekeeping is a critical service used by Active Directory and its clients for
authentication and replication arbitration. Due to the critical nature of having accurate time across
the environment, there is a perception that virtualization might exacerbate any flaws in the time
synchronization mechanisms used throughout the environment. Virtual machines are known to
experience some level of time drift due to the sharing of physical resources that can occur as a
result of multiple virtual machines running on a single physical host. This concern can be
mitigated by following VMware and Microsoft best practices for time keeping.
Operating systems track the passage of time using one of two methods: tick counting or tickless
timekeeping. In tick counting, the operating system uses a hardware device to pass interrupts at a
predetermined interval, such as 100 times per second. The operating system keeps track of these
interrupts, or ticks, to determine how much time has passed. In tickless timekeeping, a hardware
device keeps track of the number of time units that have passed since the system booted. When
needed, the operating system reads the counter. Windows-based operating systems use ticks to
keep time. Windows-based systems with multiprocessor HALs and some ACPI uniprocessor
HALs use the CMOS periodic timer to deliver interrupts, or ticks.
In addition to tracking the passage of time, operating systems must keep track of absolute time,
or wall-clock time. During startup, the operating system reads wall-clock time from the CMOS, to
the nearest second, or from a network time source. In virtual machines, VMware Tools™ provides
an additional mechanism to synchronize the guest operating system’s clock with the host’s clock.
© 2014 VMware, Inc. All rights reserved.
Page 11 of 62
Virtualizing Active Directory Domain Services on VMware vSphere
Timer devices in physical machines tend to drift as do those in virtual machines. As a result,
timekeeping software is generally required to keep time accurate over the long term. For
Windows-based operating systems, this is provided natively using the Windows Time Service
(W32Time).
In an Active Directory forest, the Windows Time Service keeps time following a hierarchy, starting
at the forest root PDC emulator to the lowest-level domain clients. Because of Active Directory’s
dependence on the Windows Time Service, it is the natural choice for time-keeping within
Windows-based guests.
By default, domain-joined Windows systems use the domain hierarchy for time keeping. In virtual
machines, this setup might conflict with VMware Tools periodic clock synchronization. The result
is two time services, one pointing to a reliable time source, the other pointing to a non-reliable
time source, thereby updating the time to inaccurate values. For this reason, the recommendation
is to standardize on one tool. For domain-joined Windows machines, the Windows Time Service
is the preferred method.
VMware Tools time synchronization is disabled by default. To verify that time synchronization is
disabled, check the VMware Tools user interface or virtual machine advanced configuration
(.vmx file). Even with VMware Tools time synchronization disabled, time synchronization is
performed during guest operating system startup and during some virtual machine maintenance
operations on the vSphere platform.
For more information on disabling VMware time synchronization for virtual machines, see the
VMware KB article Disabling Time Synchronization at http://kb.vmware.com/kb/1189.
SOURCE
0
fallriverelectricAuthor Commented:
Ok thank you.  I'll make the changes and let you know how it goes.
0
jcimarronCommented:
fallriverelectric--
Install a new CMOS battery
0
fallriverelectricAuthor Commented:
That worked great.  Thanks for the help!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.