Sync DC's time with external clock?

Hello,

I was just wondering how other make sure their DC's time is kept correct as
ours over the months can drift ahead of itself so I change oen DC's time
time to the correct time and "net time \\DCname" the others, very manual I
know.

Hello Whiteford,

Configure the DC with the PDCEmulator FSMO to an external time source:
w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update

With "PEERS" you can set the time source, either DNS name (time.windows.com)
or an ip address from a reliable time source.

Here you can find some of them:
http://www.pool.ntp.org/


All other DCs will sync with the PDCEmulator and all domain machines use
one available DC. If there are problems with time sync after configuration
of the PDCEmulator run on domain machines(can also be done with a script):
w32tm /config /syncfromflags:domhier /update

After that run:
net stop w32time
net start w32time


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I was just wondering how other make sure their DC's time is kept
> correct as ours over the months can drift ahead of itself so I change
> oen DC's time time to the correct time and "net time \\DCname" the
> others, very manual I know.
>

Thanks for finding the time to answer my question.

Where would I rung these commands from?

w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes
/update

I found my DC with the PDC role by going into ADUC > Operations Master > PDC


"Meinolf Weber [MVP-DS]" wrote in message
news:. com...
> Hello Whiteford,
>
> Configure the DC with the PDCEmulator FSMO to an external time source:
> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes
> /update
>
> With "PEERS" you can set the time source, either DNS name
> (time.windows.com) or an ip address from a reliable time source.
>
> Here you can find some of them:
> http://www.pool.ntp.org/
>
>
> All other DCs will sync with the PDCEmulator and all domain machines use
> one available DC. If there are problems with time sync after configuration
> of the PDCEmulator run on domain machines(can also be done with a script):
> w32tm /config /syncfromflags:domhier /update
>
> After that run:
> net stop w32time
> net start w32time
>
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> I was just wondering how other make sure their DC's time is kept
>> correct as ours over the months can drift ahead of itself so I change
>> oen DC's time time to the correct time and "net time \\DCname" the
>> others, very manual I know.
>>
>
>

Hello Whiteford,

Run this command on the DC with the PDCEmulator role.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks for finding the time to answer my question.
>
> Where would I rung these commands from?
>
> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
> /reliable:yes /update
>
> I found my DC with the PDC role by going into ADUC > Operations Master
> > PDC
>
> "Meinolf Weber [MVP-DS]" wrote in message
> news:. com...
>
>> Hello Whiteford,
>>
>> Configure the DC with the PDCEmulator FSMO to an external time
>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>> /reliable:yes /update
>>
>> With "PEERS" you can set the time source, either DNS name
>> (time.windows.com) or an ip address from a reliable time source.
>>
>> Here you can find some of them:
>> http://www.pool.ntp.org/
>> All other DCs will sync with the PDCEmulator and all domain machines
>> use one available DC. If there are problems with time sync after
>> configuration of the PDCEmulator run on domain machines(can also be
>> done with a script): w32tm /config /syncfromflags:domhier /update
>>
>> After that run:
>> net stop w32time
>> net start w32time
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> I was just wondering how other make sure their DC's time is kept
>>> correct as ours over the months can drift ahead of itself so I
>>> change oen DC's time time to the correct time and "net time
>>> \\DCname" the others, very manual I know.
>>>

I changed the time, by a minute then:

This successfully ran:

w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
/reliable:yes /update

but the time didn't change, I tried again and after I ran:

net stop w32time
net start w32time

And still nothing, and I doing this right?



"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...
> Hello Whiteford,
>
> Run this command on the DC with the PDCEmulator role.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Thanks for finding the time to answer my question.
>>
>> Where would I rung these commands from?
>>
>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>> /reliable:yes /update
>>
>> I found my DC with the PDC role by going into ADUC > Operations Master
>> > PDC
>>
>> "Meinolf Weber [MVP-DS]" wrote in message
>> news:. com...
>>
>>> Hello Whiteford,
>>>
>>> Configure the DC with the PDCEmulator FSMO to an external time
>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> With "PEERS" you can set the time source, either DNS name
>>> (time.windows.com) or an ip address from a reliable time source.
>>>
>>> Here you can find some of them:
>>> http://www.pool.ntp.org/
>>> All other DCs will sync with the PDCEmulator and all domain machines
>>> use one available DC. If there are problems with time sync after
>>> configuration of the PDCEmulator run on domain machines(can also be
>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>
>>> After that run:
>>> net stop w32time
>>> net start w32time
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hello,
>>>>
>>>> I was just wondering how other make sure their DC's time is kept
>>>> correct as ours over the months can drift ahead of itself so I
>>>> change oen DC's time time to the correct time and "net time
>>>> \\DCname" the others, very manual I know.
>>>>
>
>

"Whiteford" <> wrote in message
news:%23$V$...
>I changed the time, by a minute then:
>
> This successfully ran:
>
> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
> /reliable:yes /update
>
> but the time didn't change, I tried again and after I ran:
>
> net stop w32time
> net start w32time
>
> And still nothing, and I doing this right?
>

If the time is within a couple of minutes (and I use that literally), it may
not change. There's a 2-3 minute tolerance. It's not exact. I put together a
blog on the time service. THere's one section explaining the time skew
tolerance, and not the Kerberos tolerance. It should shed some light.

Configuring the Windows Time Service for Windows Server
http://msmvps.com/blogs/acefekay/arc...ws-server.aspx

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

Try changing the server name to 0.pool.ntp.org (Note: 0 = zero)
From http://www.pool.ntp.org/en/use.html

w32tm /config /manualpeerlist:0.pool.ntp.org /syncfromflags:manual
/reliable:yes /update


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Whiteford" <> wrote in message
news:%23$V$...
>I changed the time, by a minute then:
>
> This successfully ran:
>
> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
> /reliable:yes /update
>
> but the time didn't change, I tried again and after I ran:
>
> net stop w32time
> net start w32time
>
> And still nothing, and I doing this right?
>
>
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
>> Hello Whiteford,
>>
>> Run this command on the DC with the PDCEmulator role.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Thanks for finding the time to answer my question.
>>>
>>> Where would I rung these commands from?
>>>
>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> I found my DC with the PDC role by going into ADUC > Operations Master
>>> > PDC
>>>
>>> "Meinolf Weber [MVP-DS]" wrote in message
>>> news:. com...
>>>
>>>> Hello Whiteford,
>>>>
>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> With "PEERS" you can set the time source, either DNS name
>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>
>>>> Here you can find some of them:
>>>> http://www.pool.ntp.org/
>>>> All other DCs will sync with the PDCEmulator and all domain machines
>>>> use one available DC. If there are problems with time sync after
>>>> configuration of the PDCEmulator run on domain machines(can also be
>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>
>>>> After that run:
>>>> net stop w32time
>>>> net start w32time
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> I was just wondering how other make sure their DC's time is kept
>>>>> correct as ours over the months can drift ahead of itself so I
>>>>> change oen DC's time time to the correct time and "net time
>>>>> \\DCname" the others, very manual I know.
>>>>>
>>
>>
>

Hello Whiteford,

Check the event viewer for errors and post them here and also make sure no
firewall is blocking ooirt 123 udp.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I changed the time, by a minute then:
>
> This successfully ran:
>
> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
> /reliable:yes /update
>
> but the time didn't change, I tried again and after I ran:
>
> net stop w32time
> net start w32time
> And still nothing, and I doing this right?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
>
>> Hello Whiteford,
>>
>> Run this command on the DC with the PDCEmulator role.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Thanks for finding the time to answer my question.
>>>
>>> Where would I rung these commands from?
>>>
>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> I found my DC with the PDC role by going into ADUC > Operations
>>> Master
>>>
>>>> PDC
>>>>
>>> "Meinolf Weber [MVP-DS]" wrote in message
>>> news:. com...
>>>> Hello Whiteford,
>>>>
>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> With "PEERS" you can set the time source, either DNS name
>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>
>>>> Here you can find some of them:
>>>> http://www.pool.ntp.org/
>>>> All other DCs will sync with the PDCEmulator and all domain
>>>> machines
>>>> use one available DC. If there are problems with time sync after
>>>> configuration of the PDCEmulator run on domain machines(can also be
>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>> After that run:
>>>> net stop w32time
>>>> net start w32time
>>>> Best regards
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> I was just wondering how other make sure their DC's time is kept
>>>>> correct as ours over the months can drift ahead of itself so I
>>>>> change oen DC's time time to the correct time and "net time
>>>>> \\DCname" the others, very manual I know.
>>>>>

The firewalls were not open for udp/123 (doh sorry), do I just need to add
this to a batch file and run once a day?


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...
> Hello Whiteford,
>
> Check the event viewer for errors and post them here and also make sure no
> firewall is blocking ooirt 123 udp.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I changed the time, by a minute then:
>>
>> This successfully ran:
>>
>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>> /reliable:yes /update
>>
>> but the time didn't change, I tried again and after I ran:
>>
>> net stop w32time
>> net start w32time
>> And still nothing, and I doing this right?
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:. com...
>>
>>> Hello Whiteford,
>>>
>>> Run this command on the DC with the PDCEmulator role.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Thanks for finding the time to answer my question.
>>>>
>>>> Where would I rung these commands from?
>>>>
>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>> Master
>>>>
>>>>> PDC
>>>>>
>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>> news:. com...
>>>>> Hello Whiteford,
>>>>>
>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>> /reliable:yes /update
>>>>>
>>>>> With "PEERS" you can set the time source, either DNS name
>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>
>>>>> Here you can find some of them:
>>>>> http://www.pool.ntp.org/
>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>> machines
>>>>> use one available DC. If there are problems with time sync after
>>>>> configuration of the PDCEmulator run on domain machines(can also be
>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>> After that run:
>>>>> net stop w32time
>>>>> net start w32time
>>>>> Best regards
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>> and
>>>>> confers no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> Hello,
>>>>>>
>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>> change oen DC's time time to the correct time and "net time
>>>>>> \\DCname" the others, very manual I know.
>>>>>>
>
>

Hello Whiteford,

Configure the firewall settings fixed to open the port.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The firewalls were not open for udp/123 (doh sorry), do I just need to
> add this to a batch file and run once a day?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:. com...
>
>> Hello Whiteford,
>>
>> Check the event viewer for errors and post them here and also make
>> sure no firewall is blocking ooirt 123 udp.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I changed the time, by a minute then:
>>>
>>> This successfully ran:
>>>
>>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> but the time didn't change, I tried again and after I ran:
>>>
>>> net stop w32time
>>> net start w32time
>>> And still nothing, and I doing this right?
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:. com...
>>>
>>>> Hello Whiteford,
>>>>
>>>> Run this command on the DC with the PDCEmulator role.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Thanks for finding the time to answer my question.
>>>>>
>>>>> Where would I rung these commands from?
>>>>>
>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>> /reliable:yes /update
>>>>>
>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>> Master
>>>>>
>>>>>> PDC
>>>>>>
>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>> news:. com...
>>>>>> Hello Whiteford,
>>>>>>
>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>> /reliable:yes /update
>>>>>>
>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>>
>>>>>> Here you can find some of them:
>>>>>> http://www.pool.ntp.org/
>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>> machines
>>>>>> use one available DC. If there are problems with time sync after
>>>>>> configuration of the PDCEmulator run on domain machines(can also
>>>>>> be
>>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>>> After that run:
>>>>>> net stop w32time
>>>>>> net start w32time
>>>>>> Best regards
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> Hello,
>>>>>>>
>>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>>> change oen DC's time time to the correct time and "net time
>>>>>>> \\DCname" the others, very manual I know.
>>>>>>>