locked
What is causing the w32time service to start, sync, and then stop on my server after I have stopped it? RRS feed

  • Question

  • Thanks in advance for helping me find the right forum for the following question.

    For testing purposes, I sometimes have to change the date/time on a Windows Server 2012 R2 virtual machine (VMWare) that is on our domain. To ensure that the time does not resync with the domain controller, I turn off the w32time service. However, sometimes I return to the server to find that it has resynced with the domain controller. Below is the most recent example. 

    I set the server's time to 5 days in the future. It stayed "in the future" for 5 days. Then, early this morning, the w32time service started, synced, and stopped. I'm having trouble finding the cause. Below are the event logs I see. 

    The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.
    The Windows Error Reporting Service service entered the running state.
    The Windows Time service entered the running state.
    The time provider NtpClient is currently receiving valid time data from dc.domain.local (ntp.d|0.0.0.0:123->192.168.100.11:123).

    The system time has changed to ‎2016‎-‎11‎-‎28T07:23:36.098146100Z from ‎2016‎-‎12‎-‎03T07:22:30.984984500Z.
    Change Reason: An application or system component changed the time.

    The time service has set the time with offset 431934 seconds.
    The time service is now synchronizing the system time with the time source dc.domain.local (ntp.d|0.0.0.0:123->192.168.100.11:123).

    The system time has changed to ‎2016‎-‎11‎-‎28T07:23:36.112000000Z from ‎2016‎-‎11‎-‎28T07:23:36.120351400Z.
    Change Reason: An application or system component changed the time.
    The system time has changed to ‎2016‎-‎11‎-‎28T07:23:36.111000000Z from ‎2016‎-‎11‎-‎28T07:23:36.112822700Z.
    Change Reason: An application or system component changed the time.

    The Windows Time service entered the stopped state.

    The Windows Error Reporting Service service entered the stopped state.
    The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.


    • Edited by Nformation Monday, November 28, 2016 5:34 PM
    Monday, November 28, 2016 4:40 PM

Answers

  • In my post, I stated that I do disable the Windows Time service. The problem is that something else is turning it on, syncing, then turning it off again. 

    Then it sounds like the service may be Manual start rather than Disabled. Either case I'd ask over here.

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winservergen

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    • Proposed as answer by Just Karl Tuesday, November 29, 2016 12:43 AM
    • Marked as answer by Nformation Wednesday, November 30, 2016 4:20 PM
    Monday, November 28, 2016 10:31 PM

All replies

  • Hello,

    If this is a vm hosted on Hyper-V, I'd ask in the Hyper-V forum.

    You could also ask in the Windows Server Security forum.

    If it's a VNWare hosted server, kill the VMWare Tools service.

    Karl


    When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
    My Blog: Unlock PowerShell
    My Book: Windows PowerShell 2.0 Bible
    My E-mail: -join('6D73646E5F6B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

    Monday, November 28, 2016 5:24 PM
  • Thanks. Perhaps I'll post in Windows Server Security. It's a VMWare-hosted server, but I would like to know for sure that VMWare Tools is the culprit, as I'd prefer to have it running for ease of testing. The time sync option for VMWare Tools is off, so I wouldn't think that would be the issue.
    • Edited by Nformation Monday, November 28, 2016 5:45 PM
    Monday, November 28, 2016 5:43 PM
  • If you don't want it to sync then you could disable the Windows Time service (W32Time).

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Monday, November 28, 2016 9:15 PM
  • In my post, I stated that I do disable the Windows Time service. The problem is that something else is turning it on, syncing, then turning it off again. 
    Monday, November 28, 2016 10:27 PM
  • In my post, I stated that I do disable the Windows Time service. The problem is that something else is turning it on, syncing, then turning it off again. 

    Then it sounds like the service may be Manual start rather than Disabled. Either case I'd ask over here.

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winservergen

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    • Proposed as answer by Just Karl Tuesday, November 29, 2016 12:43 AM
    • Marked as answer by Nformation Wednesday, November 30, 2016 4:20 PM
    Monday, November 28, 2016 10:31 PM