W32Time

Hello Experts trying to configure our AD DS as an authoritative time server.  Running command w32tm /query /peers returns

Peer:
State: Pending
Mode: 0 (reserved)
Stratum: 0 (unspecified)
PeerPoll Interval: 0 (unspecified)
HostPoll Interval: 0 (unspecified)

I tried adding NTP servers how ever unable to sync to one of the below, but unable to ping either one.
-nist.time.gov
-time.windows.com
ManieyaK_Citrix Systems / Network AdminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rob WilliamsCommented:
I have had issues with time.windows.com and NIST is making changes.  See the following link to choose recommended nsit address
https://www.nist.gov/pml/time-and-frequency-division/services/internet-time-service-its

Following is a good article to use for set up.  Title references SBS but applies to server standard as well
http://www.thirdtier.net/how-to-set-an-ntp-time-server-in-windows-2008-sbs-2008-and-sbs-2011/
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Dr. KlahnPrincipal Software EngineerCommented:
I've found the NTP Pool servers to be more reliable than either the NIST or Windows servers.  Those are the defaults for every piece of hardware on the planet so they're beaten unmercifully.  On the other hand, the NTP Pool servers rotate across a large pool of servers worldwide.

In the USA, use the US zone servers:

0.us.pool.ntp.org
1.us.pool.ntp.org
2.us.pool.ntp.org
and so on ...
0
ManieyaK_Citrix Systems / Network AdminAuthor Commented:
Rob these are both good articles, however neither one address the issue of not being able to ping using either hostname or ip address.
0
Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

Dr. KlahnPrincipal Software EngineerCommented:
Well, I can't ping either of them from here.  So presumably that is a deliberate action on the part of the server operators, denying echo packets.
0
Rob WilliamsCommented:
Yes, why would not being able to ping them be a problem?   Accepting ICMP requests (pings) makes you more susceptible to denial of service attacks.  Many block pings, I know I certainly do on all my sites. I am not sure either of those servers still exist. I know time.windows.com stopped working at one point, but may be back up and as the article states nist is changing their URLs
0
ManieyaK_Citrix Systems / Network AdminAuthor Commented:
Rob - Yes this makes sense, thank you for the clarification.  I'll make the changes & post the results.  Also the article in the link below gave me some  insight as to what you stated.   Again, thank you for the quick responses.

https://www.serverintellect.com/support/windowsserversecurity/disable-icmp-requests/
0
Rob WilliamsCommented:
Let us know how you make out.  Best of luck !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.