Solved

Problem with time server configuration.

Posted on 2016-07-22
8
55 Views
Last Modified: 2016-07-22
We have a Windows 2008 server which is reporting a lot of errors regarding the time service as detailed below.  This server is configured as a DC.  Notice the time is constantly being adjusted and the server is regularly stopping itself advertising as a time server

Event Log
This server is hosted on the cloud and is configured to sync time with the primary DC on our local site.  This local primary DC uses references time.windows.com.

Time Config

What is causing these time events and how should we fix it?
0
Comment
Question by:canuckconsulting
  • 4
  • 3
8 Comments
 
LVL 11

Expert Comment

by:Old User
ID: 41724268
This points to a communication issue with the time source, ie unable to update time from 10.1.1.250.

you need to resolve the communication issue or set that server to use an external time source.
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 300 total points
ID: 41724278
If your cloud server is virtual (most likely) then you need to disable a key in the registry that forces it to sync with it's host machine no matter what else you have added to direct it to sync with your on-premise DC.

Look for this key:
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider\

Then set "Enabled" to "0"

After you do that, restart the time service:

net stop w32time
net start w32time

Also, I'd suggest that you don't use time.windows.com, if the server cannot reach it for some reason (which happens a lot) then you'll get those type of errors.

Instead use the ntp.org servers -- and to change to those run the following commands on your PDC:

w32tm /config /manualpeerlist:"0.pool.ntp.org,0x8 1.pool.ntp.org,0x8 2.pool.ntp.org,0x8" /syncfromflags:MANUAL
w32tm /config /update
net stop w32time
net start w32time
w32tm /resync /nowait
0
 

Author Comment

by:canuckconsulting
ID: 41724515
Jeffrey Kane: Thanks

I found this from ntp.org.  It suggests that this is not the right path for servers on an AD network.  Can you please advise?  I should mention that I made your changes prior to find this article so am a bit nervous now as I'm unsure how to rollback!

An example configuration, suitable for a Windows 2003 standalone server or Primary Domain Controller Emulator in a Active Directory domain:
C:\>w32tm /config /update /manualpeerlist:"0.pool.ntp.org,0x8 1.pool.ntp.org,0x8 2.pool.ntp.org,0x8 3.pool.ntp.org,0x8" /syncfromflags:MANUAL
The above configuration tells Windows Time Service to use four servers from the NTP Pool, and use a client-mode association (identified by the ,0x8 after each server name) to contact them. This configuration is analgous to server directives in the configuration file for ntpd. Note that this configuration should not be used on Windows servers or clients that are members of an Active Directory domain, unless you absolutely want them to ignore time from Active Directory domain controllers on the network.
0
 

Author Comment

by:canuckconsulting
ID: 41724549
Dave Preston: Thanks for the input.

The server with this errors is hosted remotely at hosting.com on the cloud while 10.1.1.250 is based at our local site.  They are both DCs.  Could the remote server be failing due to delays associated with this configuration.  Should instead both DCs be configured to sync with the same external time server like ntp.org?
0
Want to promote your upcoming event?

Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

 
LVL 11

Assisted Solution

by:Old User
Old User earned 200 total points
ID: 41724556
Yes I would configure both to sync from the same time source. I too use ntp.org.
If you go to their site there are very good instructions on how to configure a Windows server to use their pool of ntp servers
0
 

Author Comment

by:canuckconsulting
ID: 41724559
Thanks Dave.

I reread my post to Jeffrey above and think I missed the point.  Presumably the bit in bold refers to non-DCs.  Is that your chaps take as well?
0
 
LVL 11

Expert Comment

by:Old User
ID: 41724562
It is okay to use external time source on a DC, but better to let clients and member servers use th DC as their time source
0
 

Author Closing Comment

by:canuckconsulting
ID: 41724577
Thanks guys!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now