W32Time Event ID 27 After WIndows 2003 SP1 Application

Discussion in 'Windows Server' started by Peter Greenway, Jun 25, 2005.

  1. All

    We have an arising problem with W32Time caused by installing SP1 on a PDC.

    We have a small domain running Windows 2003 standard edition on two domain
    controllers. The PDC has a hardware time receiver and is then subsequenly
    used to propogate the time throughout the domain and until earlier this
    evening was just Windows 2003, whilst the other domain controller was
    Windows 2003 SP1.

    The secondary domain controller was receiving the time perfectly prior to
    the upgrade of the PDC: Installing SP1 on PDC and simply rebooting he PDC
    has caused he following error to be continually generated in the event log:

    Source. W32Time, Event ID 27

    Time Provider NtpClient: The response received from domain controller
    ourprimarydomainconroller.local is missing the signature. The response may
    have been tampered with and will be ignored.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.


    Litterally nothing else has changed: just SP1 and a reboot of the PDC
    obviously SP1 has upset something and I dont know what - can anyone shed any
    light ??


    Everything else seems to be working fine and W32time certainly was SP1.

    Peter Greenway
     
    Peter Greenway, Jun 25, 2005
    #1
    1. Advertisements

  2. Abstract fm MS

    Do one or all of the following:

    a.. Verify with an Administrator that this computer account is valid in
    Active Directory.
    b.. Verify that no domain controllers are present in the manual time
    source list.
    c.. Configure an alternative manual time source. If your computer is part
    of a domain, then it should get its time source from the domain controller.
    The configuration can be modified by using the w32tm command line tool and
    manipulating the syncfromflags option

    --
    ---
    Giuseppe Nacci
    Microsoft Certified System Engineer
    Security Manager

    --------------------------------------------------------------------
    CONFIDENTIALITY NOTICE
    This message and its attachments are addressed solely to the persons
    above and may contain confidential information. If you have received
    the message in error, be informed that any use of the content hereof
    is prohibited. Please return it immediately to the sender and delete
    the message. Should you have any questions, please contact us by
    replying to
    Thank you
    --------------------------------------------------------------------
     
    Giuseppe Nacci, Jun 25, 2005
    #2
    1. Advertisements

  3. Hello

    Thanks for the response. The time service is set up perfectly correctly and
    was working fine until the SP1 upgrade - what exactly is the meaning of
    event id 27. It seems to infer that SP1 has locked something down that
    stops the time service from working properly - I just cant figure out what.

    It is very frustrating.

    P.
     
    Peter Greenway, Jun 26, 2005
    #3

  4. Which kind of antivirus do u have?
    Did u stop the AV before intalling Sp1?

    --
    ---
    Giuseppe Nacci
    Microsoft Certified System Engineer
    Security Manager

    --------------------------------------------------------------------
    CONFIDENTIALITY NOTICE
    This message and its attachments are addressed solely to the persons
    above and may contain confidential information. If you have received
    the message in error, be informed that any use of the content hereof
    is prohibited. Please return it immediately to the sender and delete
    the message. Should you have any questions, please contact us by
    replying to
    Thank you
    --------------------------------------------------------------------
     
    Giuseppe Nacci, Jun 27, 2005
    #4
  5. We use Sophos Anti-Virus. I have to say that we did not stop the anti-virus
    prior to installation - are you suggesting that this could be the problem
    ???
     
    Peter Greenway, Jun 27, 2005
    #5
  6. Yes it could be.......
    Do u have any hardware/software that drop port no.123?
    --
    ---
    Giuseppe Nacci
    Microsoft Certified System Engineer
    Security Manager

    --------------------------------------------------------------------
    CONFIDENTIALITY NOTICE
    This message and its attachments are addressed solely to the persons
    above and may contain confidential information. If you have received
    the message in error, be informed that any use of the content hereof
    is prohibited. Please return it immediately to the sender and delete
    the message. Should you have any questions, please contact us by
    replying to
    Thank you
    --------------------------------------------------------------------
     
    Giuseppe Nacci, Jun 29, 2005
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.