Time sync keeps going off by 2 minutes on vmhost

Our ESXi 6 host time keeps going off by 2 munitues thus causing our dcs and such to have time issues off by 2 minutes..
Is there anything I can do to stop this?
LVL 1
vmichAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
have you got time enabled in vmware tools? are you sure you have it enabled if you say yes?

My advice would be to not do time through vmware tools, do time through your windows FSMO role holding DC.

Do you need the steps to do this?
vmichAuthor Commented:
not sure if the time is enabled in VMware tools or not.. So are you saying to disable this for all of our vms?
Any steps you are referring to would be good
vmichAuthor Commented:
or did you mean to disable the time sync for the DC vms not all of the vms in the environment?
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

BembiCEOCommented:
If you have windows machines as guests, you may not connect windows with the host. The clients usually contact the DCs to get their time and at least one of the DCs should be setup as its own Time Server with an external source.

If the time differs from the real time, it doesn't matter if all machines have the same "wrong" time, just Kerberos has a limit for the time difference. You may observe, from where the time is fetches and possibly, depended from your country choose a different time source, maybe your currently used source is not so reliable. And make sure, all machines use the same source, if you have more than one. Also routers and other devices may have their one time source.

If you get not rid of the difference, means the one system has the right time while another system gets a different time even they use the same source, there is usually the possibility to work with time offsets (which you may can configure either in the VM environment or under windows) A time offset is just a value used for correction of the time.

If the source is reliable and you see even differences in the time, it may happen due to heavy load on some responsible systems. As the servers sync their times in a defined schedule, some heavy load on these servers may delay the internal clock of the machine. This is one of the reasons, why a time source server should be better a physical box because the timer clock on the board is more stable than an emulated clock in a guest OS.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
Hi,

I recomend this for your VM machines not hosts.
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1189

This setting should be disabled in all servers.
Time will be done through windows and active directory from now.

Do you have your time service on your role holding domain controller setup? or is it running with default values?

M
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
The following article shows how to set your windows DC to use external sources.

https://technet.microsoft.com/en-us/library/cc794937(v=ws.10).aspx
vmichAuthor Commented:
so do I have to do this for every vm server or just my vm domain controllers
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Don't sync VMs with host ever!

Just sync host to external time source and sync DCs to the same source!

Simples really!

Domain members will sync time with domain
vmichAuthor Commented:
Andrew,
I did not ever set anything on any vm other than the default settings for time with VMware tools.
I do have 2 DCs one is set an the primary tme source. So do I need to disable something on my 2 vm DCs?
vmichAuthor Commented:
Andrew,
I just noticed that I have my DC set to external time source but I have my 4 vm host set to the ntp DC..
So I should not point the vmhost to my DC but to the same ext source that the DC is pointing to?
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
VMich I already posted you the steps of what andrew is telling you here too, it was my original advice FWIW. Need anything further just let me know.

Andrew is right do not sync VM's to host for time. To be extra sure I think you should disable this feature in VMtools or at least verify the feature is disabled.
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Latest tools does disable by default!
vmichAuthor Commented:
Andrew,
I just set all 5 of my vmhost to the eternal time source the same ext as my DCs, but seems like 4 of the vm host are still running about 1 minute fast and the other host seems to be right on..
Is there something I need to do to synce all of th host or does it take sometime?
BembiCEOCommented:
Yes, possibly they are enabled by default, but as said by the experts before, windows handles the time servers alone (by default) and this means, a synchronisation with VM hosts would struggle the windows own handling. So switch vm ware time synchronization off for all windows machines.

The host itself can use its own source or even the primary NTP windows DC. VM host and guests are independent from each other. Even if the time is not ins sync should not have an effect with the exceptions, that event log times from the windows machines doesn't fit exactly to event log times of the vm host.

If all DCs are virtual, take into notice that the computer clock is virtual as well, so if the machine (or even the host) are heavily used, the clock may tick a bit slower than expected. If the time differences are not so large, they will be corrected with the next snyc sequence.
BembiCEOCommented:
Also the hosts have sync cycles, they do not sync all the time.
Wait until tomorrow and everything should be fine.
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
Andrew Hancock
Expert Comment 2015-11-09 at 06:09:41ID: 41213995
Latest tools does disable by default!

best to verify.
vmichAuthor Commented:
Ok Mark,
How do I check to see if this is disabled?
vmichAuthor Commented:
I found the option for the vms when I edit the vm, and the selection for sync the vm with the host is not checked..
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
Good I expect it to be disabled too, now you just need to setup your domain controller to sync off a time source.

https://technet.microsoft.com/en-us/library/cc794937(v=ws.10).aspx
vmichAuthor Commented:
yes I already have the DC pointing to external time source... As I did mention though, my 5 vm host were pointing to my DC, but I have now set them to the same external time source the same as the DCS.
Mark BillExchange, AD, SQL, VMware, HPE, 3PAR, FUD, Anti MS Tekhnet, Pro EE, #1Commented:
Good that should be that then, you can ensure this is all done by running the command dcdiag on your main domain controller, once this returns with no erorrs this will be fine from now on.

Please ignore event log errors in the dcdiag.
vmichAuthor Commented:
solved
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.