Avatar of musalman
musalman
Flag for Oman asked on

Windows Server 2008 R2 - Clock Time out of synch

Experts,

We have 1 Domain Controller Server running Win 2008 r2 in our Head office, we observed that the Windows Server clock is out of synch and is showing 12 mins back than the current time.

Due to this, all our Domain PCs are showing the same wrong time.

this is causing us a lot headache.

Please suggest the simple way to Adjust the Time on the Server as well as Clients.

Note 1: I am having less knowledge about Servers and Network but can do the steps provided.

Note 2: I remember, one time in 2015 , I tried to adjust the Server Clock time directly from the Clock, it caused me a Disaster, where all the Domain PC's lost the Trust Relationship.

I am expecting a safe and secure way to adjust it.

Many thanks
Yasir
Windows Server 2008Domain Controller

Avatar of undefined
Last Comment
musalman

8/22/2022 - Mon
Patrick Bogers

Hi

First you want to know who is the time server and how is it configured.
w32tm /query /status

Is it configured to gets it time from a public ntp server? When was the last update?

Please let us know.
it_saige

Also if this dc is not the pdc emulator then it's own configuration should be set to use the Domain Hierarchy for it's time synchronization:

https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

-saige-
musalman

ASKER
From the Server DOS:

Last succ. Synch time: 7th Mar 2017
Source: Free running System Clock

From the Client DOS:
Source: our AD Server Name.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
aravind anche

uncheck that in the Settings -> Integration Services on vm
musalman

ASKER
Dear it_saige
Our Server is the PDC.

Dear dj 3094
Which setting are you talking about ?

Please let me know...
it_saige

dj 3094 is making their recommendation based upon the assumption that the dc in question is a virtual machine instance.  If this is the case then one portion of the solution is to disable the time integration service.

Based upon what you stated about the dc in question being the pdc, my recommendation is to configure your pdc so that it will use an external time source instead of the cmos clock.

I have posted a few EE PAQs in relation to this, one of the most relevant is this one: https:/Q_28597899.html#a40553961

You don't have to set the group policy if you do not want to (I normally recommend it since moving the time service is usually an afterthought if you ever decide to move the PDCe Role or replace the PDCe).

As for the other DC's, member servers and client machines, it sounds as if they are already configured to get their time from the domain hierarchy (which is the way it should be).  Once the PDCe's time changes the others should change as well.  Depending upon the size of your network it could take a little time but it should be a fairly quick and painless process.

-saige-
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
musalman

ASKER
Dear it_saige

Please provide me the Exact commands to set the time source as well as how to run them,

Secondly, let me know if there is any consequence possible ?

I remember, one time, when changing the time on Server disturbed the Client Server relationship , and since then, Trust Relationship Error appears on any Client PC while they enter a wrong Password on their PC's.

Regards
musalman

ASKER
ANY FURTHER SOLUTION ON THIS ?
ASKER CERTIFIED SOLUTION
Patrick Bogers

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
musalman

ASKER
Should I run this command on Windows AD Server Command Prompt ?
Will it affect any other setting ?
Will it sync the time at Client PC automatically ?

thank you for your help !
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
Patrick Bogers

Hi

Yes you should
No it shouldnt
Yes they should, you can check with the commands from my first post. They should all say: Source: our AD Server Name

BTW we can assume by now the DC is not a vm right?
musalman

ASKER
You are right - DC is not a VM, Ok I will execute the command soon, and will return back with the results.
it_saige

One correction, it depends on each individual client pc and member servers time settings as to whether this will sync time automatically on workstations and member servers.  First, the pc's must be set to use the domain hierarchy.  Second, their max/min pos/neg phase correction settings have to be set properly (generally the default values suffice).

https://support.microsoft.com/en-us/help/884776/how-to-configure-the-windows-time-service-against-a-large-time-offset

-saige-

P.S. - The previous EE PAQ that I reference has the commands in it as well as links to other time service articles.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
musalman

ASKER
Thanks!

It worked fine.