locked
Time sync won't change from NT5DS RRS feed

  • Pergunta

  • Hi,

    I'm struggling with an issue on our PDC. I'm trying to get it to sync to an external source but it's not happening.
    I've run all the usual commands such as w32tm /config /manualpeerlist:some.timeserver.net /syncfromflags:MANUAL /reliable:YES /update

    I've also tried everything on this page here but still no luck.
    Everything is saying it should be using NTP but when I run w32tm /query /configuration I get the following:

    EventLogFlags: 2 (Local)
    AnnounceFlags: 5 (Local)
    TimeJumpAuditOffset: 28800 (Local)
    MinPollInterval: 6 (Local)
    MaxPollInterval: 10 (Local)
    MaxNegPhaseCorrection: 1800 (Local)
    MaxPosPhaseCorrection: 1800 (Local)
    MaxAllowedPhaseOffset: 300 (Local)

    FrequencyCorrectRate: 4 (Local)
    PollAdjustFactor: 5 (Local)
    LargePhaseOffset: 50000000 (Local)
    SpikeWatchPeriod: 900 (Local)
    LocalClockDispersion: 10 (Local)
    HoldPeriod: 5 (Local)
    PhaseCorrectRate: 7 (Local)
    UpdateInterval: 100 (Local)


    [TimeProviders]

    NtpClient (Local)
    DllName: C:\Windows\system32\w32time.DLL (Local)
    Enabled: 1 (Local)
    InputProvider: 1 (Local)
    CrossSiteSyncFlags: 2 (Policy)
    AllowNonstandardModeCombinations: 1 (Local)
    ResolvePeerBackoffMinutes: 15 (Policy)
    ResolvePeerBackoffMaxTimes: 7 (Policy)
    CompatibilityFlags: 2147483648 (Local)
    EventLogFlags: 0 (Policy)
    LargeSampleSkew: 3 (Local)
    SpecialPollInterval: 3600 (Policy)
    Type: NT5DS (Policy)

    NtpServer (Local)
    DllName: C:\Windows\system32\w32time.DLL (Local)
    Enabled: 1 (Local)
    InputProvider: 0 (Local)
    AllowNonstandardModeCombinations: 1 (Local)

    VMICTimeProvider (Local)
    DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
    Enabled: 1 (Local)
    InputProvider: 1 (Local)


    which to me says its still using NT5DS and not NTP like everything has been set to
    This DC holds the Schema Master, Domain Naming Maseter, PDC and RID Pool Manager

    Any ideas?

    Cheers
    terça-feira, 21 de agosto de 2012 08:00

Respostas

  • I have just managed to solve this issue, annoyingly there was a GPO that was over riding anything I was doing

    Thank you for all you help

    • Marcado como Resposta RLAGroup terça-feira, 28 de agosto de 2012 12:21
    terça-feira, 28 de agosto de 2012 12:21

Todas as Respostas

  • Hello,

    was the PDCEmulator FSMO transferred from another DC before? If yes, did you also change the previous PDCEmulator for the time sync settings?

    So you use any GPO for time sync?

    On my PDCEmulator it looks as expected:

    [TimeProviders]

    NtpClient (Local)
    DllName: C:\Windows\system32\w32time.dll (Local)
    Enabled: 1 (Local)
    InputProvider: 1 (Local)
    AllowNonstandardModeCombinations: 1 (Local)
    ResolvePeerBackoffMinutes: 15 (Local)
    ResolvePeerBackoffMaxTimes: 7 (Local)
    CompatibilityFlags: 2147483648 (Local)
    EventLogFlags: 1 (Local)
    LargeSampleSkew: 3 (Local)
    SpecialPollInterval: 3600 (Local)
    Type: NTP (Local)
    NtpServer: ptbtime1.ptb.de ptbtime2.ptb.de (Local)


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.


    terça-feira, 21 de agosto de 2012 08:17
  • Hi,

    Unfortunately I've only recently taken over the IT here so I'm not sure what was done before I started, I believe there is a GPO enabled for time syncing.

    The Default Domain Controllers Policy has been set to Not Configured for everything under Computer Config > Administrative Templates > System > Windows Time Service
    I'm not sure if that is correct?

    Cheers

    terça-feira, 21 de agosto de 2012 08:41
  • Hello,

    by default there is no need to configure GPOs for time sync. RSOP.MSC will show you all settigns on the machine.

    Also there is no problem to run the mentioned command on DCs having NOT the PDCEmulator FSMO. Check the event viewer after running the command and keep in mind that this takes some time to refresh.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    terça-feira, 21 de agosto de 2012 09:03
  • The only a things showing in EV are:

    1. The time service has started advertising as a time source.
    2. The time service has started advertising as a good time source.
    3. Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient
    terça-feira, 21 de agosto de 2012 09:46
  • Hello,

    "Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient"

    This sounds for me that the machine is NOT configured to an external time source. PLEASE RUN ALL FOLLOWING COMMANDS with an ELEVATED COMMAND PROMPT (RUNAS Administrator):

    Please  remove all configuration on the PDCEmulator with:

    net stop w32time

    w32tm /unregister

    w32tm /register

    net start w32time

    And now run again the command:

    w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update

    Please set for PEERS the time source as listed above, either with it’s ip address or DNS name. If more then one is needed separate them with a space in between and don't forget the quotes: "time.domain.com time1.domain.com"

    Internet Time servers you can find here: http://www.pool.ntp.org/


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    • Marcado como Resposta Andy Qi terça-feira, 28 de agosto de 2012 07:28
    • Não Marcado como Resposta RLAGroup terça-feira, 28 de agosto de 2012 07:45
    terça-feira, 21 de agosto de 2012 10:09
  • I have run the following commands with an elevated cmd prompt

    net stop w32time
    The Windows Time service is stopping.
    The Windows Time service was stopped successfully.

    w32tm /unregister
    W32Time successfully unregistered.

    w32tm /register
    W32Time successfully registered.

    net start w32time
    The Windows Time service is starting..
    The Windows Time service was started successfully.

    w32tm /config /manualpeerlist:0.uk.pool.ntp.org,0x8 /syncfro
    mflags:manual /reliable:yes /update
    The command completed successfully.

    When doing a w32tm /query /configuration the type is still saying NT5DS

    terça-feira, 21 de agosto de 2012 10:16
  • Anyone else have any ideas?
    quarta-feira, 22 de agosto de 2012 13:11
  • I have run this command and it did not work - as far as I can see its still saying NT5DS (Policy) and not NTP
    terça-feira, 28 de agosto de 2012 07:47
  • Hello,

    have you assured with "netdom query fsmo" that the PDCEmulator FSMO is on that DC?

    Any errors when using the support tools, if yes please upload the following files:

    ipconfig /all >c:\ipconfig.txt [all DCs]
    dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt  ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)]
    dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)
    ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file.

    As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) http://explore.live.com/windows-live-skydrive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    terça-feira, 28 de agosto de 2012 12:20
  • I have just managed to solve this issue, annoyingly there was a GPO that was over riding anything I was doing

    Thank you for all you help

    • Marcado como Resposta RLAGroup terça-feira, 28 de agosto de 2012 12:21
    terça-feira, 28 de agosto de 2012 12:21
  • Hello,

    thanks for the feedback about the solution with GPO overriding.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    terça-feira, 28 de agosto de 2012 12:58
  • So lame! That's what happened to me too! I was pulling my hair out as I was brought into the network like your situation. Self inflicted chaos I say!
    quarta-feira, 26 de setembro de 2012 20:17
  • Hi,

    I have the same problem but I dont know how to override the current GPO.

    Are you still there RLAGroup?

    Thanks a bunch!

    segunda-feira, 2 de novembro de 2015 09:59
  • Hi,

    I have the same problem but I dont know how to override the current GPO.

    Are you still there RLAGroup?

    Thanks a bunch!

    I am still here! Do you know what GPO is pushing out the policy? If so remove that entry from the GPO and you should be good to go. If you don't know what GPO is doing it try running gpresult /h c:\report.html and read through the report it generates to find the GPO causing the problem 

    segunda-feira, 2 de novembro de 2015 10:11
  • hi I dont know what GPO but I have searched via Regedit and change 

    "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32time\Parameters"

    Key "Type" N5TP to NTP

    Now it work fine

    C:\Windows\system32>w32tm /stripchart /computer:time.windows.com /samples:5 /dataonly
    Отслеживание time.windows.com [13.80.12.54:123].
    Сбор образцов 5.
    Текущее время - 23.12.2016 16:49:14.
    16:49:14, +00.0207386s
    16:49:16, +00.0315575s
    16:49:18, +00.0404169s
    16:49:20, +00.0279537s
    16:49:22, +00.0201885s

    sexta-feira, 23 de dezembro de 2016 13:54
  • Hi RLAGroup. Are you still there?

    Can you identify what GPO was over riding it?

    quarta-feira, 5 de agosto de 2020 05:56