Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Sync DC's time with external clock?
Sync DC's time with external clock? [message #325207] Mon, 23 November 2009 03:00 Go to next message
Peter[1]  is currently offline Peter[1]  United Kingdom
Messages: 76
Registered: August 2009
Member
Hello,

I was just wondering how other make sure their DC's time is kept correct as
ours over the months can drift ahead of itself so I change oen DC's time
time to the correct time and "net time \\DCname" the others, very manual I
know.
Re: Sync DC's time with external clock? [message #325210 is a reply to message #325207] Mon, 23 November 2009 03:10 Go to previous messageGo to next message
Meinolf Weber MVP-DS  is currently offline Meinolf Weber MVP-DS  Germany
Messages: 129
Registered: July 2009
Senior Member
Hello Whiteford,

Configure the DC with the PDCEmulator FSMO to an external time source:
w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update

With "PEERS" you can set the time source, either DNS name (time.windows.com)
or an ip address from a reliable time source.

Here you can find some of them:
http://www.pool.ntp.org/


All other DCs will sync with the PDCEmulator and all domain machines use
one available DC. If there are problems with time sync after configuration
of the PDCEmulator run on domain machines(can also be done with a script):
w32tm /config /syncfromflags:domhier /update

After that run:
net stop w32time
net start w32time


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I was just wondering how other make sure their DC's time is kept
> correct as ours over the months can drift ahead of itself so I change
> oen DC's time time to the correct time and "net time \\DCname" the
> others, very manual I know.
>
Re: Sync DC's time with external clock? [message #325212 is a reply to message #325210] Mon, 23 November 2009 03:23 Go to previous messageGo to next message
Peter[1]  is currently offline Peter[1]  United Kingdom
Messages: 76
Registered: August 2009
Member
Thanks for finding the time to answer my question.

Where would I rung these commands from?

w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes
/update

I found my DC with the PDC role by going into ADUC > Operations Master > PDC


"Meinolf Weber [MVP-DS]" wrote in message
news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
> Hello Whiteford,
>
> Configure the DC with the PDCEmulator FSMO to an external time source:
> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes
> /update
>
> With "PEERS" you can set the time source, either DNS name
> (time.windows.com) or an ip address from a reliable time source.
>
> Here you can find some of them:
> http://www.pool.ntp.org/
>
>
> All other DCs will sync with the PDCEmulator and all domain machines use
> one available DC. If there are problems with time sync after configuration
> of the PDCEmulator run on domain machines(can also be done with a script):
> w32tm /config /syncfromflags:domhier /update
>
> After that run:
> net stop w32time
> net start w32time
>
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> I was just wondering how other make sure their DC's time is kept
>> correct as ours over the months can drift ahead of itself so I change
>> oen DC's time time to the correct time and "net time \\DCname" the
>> others, very manual I know.
>>
>
>
Re: Sync DC's time with external clock? [message #325227 is a reply to message #325212] Mon, 23 November 2009 04:19 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Whiteford,

Run this command on the DC with the PDCEmulator role.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks for finding the time to answer my question.
>
> Where would I rung these commands from?
>
> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
> /reliable:yes /update
>
> I found my DC with the PDC role by going into ADUC > Operations Master
> > PDC
>
> "Meinolf Weber [MVP-DS]" wrote in message
> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>
>> Hello Whiteford,
>>
>> Configure the DC with the PDCEmulator FSMO to an external time
>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>> /reliable:yes /update
>>
>> With "PEERS" you can set the time source, either DNS name
>> (time.windows.com) or an ip address from a reliable time source.
>>
>> Here you can find some of them:
>> http://www.pool.ntp.org/
>> All other DCs will sync with the PDCEmulator and all domain machines
>> use one available DC. If there are problems with time sync after
>> configuration of the PDCEmulator run on domain machines(can also be
>> done with a script): w32tm /config /syncfromflags:domhier /update
>>
>> After that run:
>> net stop w32time
>> net start w32time
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> I was just wondering how other make sure their DC's time is kept
>>> correct as ours over the months can drift ahead of itself so I
>>> change oen DC's time time to the correct time and "net time
>>> \\DCname" the others, very manual I know.
>>>
Re: Sync DC's time with external clock? [message #325237 is a reply to message #325227] Mon, 23 November 2009 04:38 Go to previous messageGo to next message
Peter[1]  is currently offline Peter[1]  United Kingdom
Messages: 76
Registered: August 2009
Member
I changed the time, by a minute then:

This successfully ran:

w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
/reliable:yes /update

but the time didn't change, I tried again and after I ran:

net stop w32time
net start w32time

And still nothing, and I doing this right?



"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
> Hello Whiteford,
>
> Run this command on the DC with the PDCEmulator role.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Thanks for finding the time to answer my question.
>>
>> Where would I rung these commands from?
>>
>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>> /reliable:yes /update
>>
>> I found my DC with the PDC role by going into ADUC > Operations Master
>> > PDC
>>
>> "Meinolf Weber [MVP-DS]" wrote in message
>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>
>>> Hello Whiteford,
>>>
>>> Configure the DC with the PDCEmulator FSMO to an external time
>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> With "PEERS" you can set the time source, either DNS name
>>> (time.windows.com) or an ip address from a reliable time source.
>>>
>>> Here you can find some of them:
>>> http://www.pool.ntp.org/
>>> All other DCs will sync with the PDCEmulator and all domain machines
>>> use one available DC. If there are problems with time sync after
>>> configuration of the PDCEmulator run on domain machines(can also be
>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>
>>> After that run:
>>> net stop w32time
>>> net start w32time
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hello,
>>>>
>>>> I was just wondering how other make sure their DC's time is kept
>>>> correct as ours over the months can drift ahead of itself so I
>>>> change oen DC's time time to the correct time and "net time
>>>> \\DCname" the others, very manual I know.
>>>>
>
>
Re: Sync DC's time with external clock? [message #325288 is a reply to message #325237] Mon, 23 November 2009 06:32 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Whiteford" <no@no.com> wrote in message
news:%23$V$1FDbKHA.5976@TK2MSFTNGP05.phx.gbl...
>I changed the time, by a minute then:
>
> This successfully ran:
>
> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
> /reliable:yes /update
>
> but the time didn't change, I tried again and after I ran:
>
> net stop w32time
> net start w32time
>
> And still nothing, and I doing this right?
>

If the time is within a couple of minutes (and I use that literally), it may
not change. There's a 2-3 minute tolerance. It's not exact. I put together a
blog on the time service. THere's one section explaining the time skew
tolerance, and not the Kerberos tolerance. It should shed some light.

Configuring the Windows Time Service for Windows Server
http://msmvps.com/blogs/acefekay/archive/2009/09/18/configur ing-the-windows-time-service-for-windows-server.aspx

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Re: Sync DC's time with external clock? [message #325294 is a reply to message #325237] Mon, 23 November 2009 06:40 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Try changing the server name to 0.pool.ntp.org (Note: 0 = zero)
From http://www.pool.ntp.org/en/use.html

w32tm /config /manualpeerlist:0.pool.ntp.org /syncfromflags:manual
/reliable:yes /update


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Whiteford" <no@no.com> wrote in message
news:%23$V$1FDbKHA.5976@TK2MSFTNGP05.phx.gbl...
>I changed the time, by a minute then:
>
> This successfully ran:
>
> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
> /reliable:yes /update
>
> but the time didn't change, I tried again and after I ran:
>
> net stop w32time
> net start w32time
>
> And still nothing, and I doing this right?
>
>
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>> Hello Whiteford,
>>
>> Run this command on the DC with the PDCEmulator role.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Thanks for finding the time to answer my question.
>>>
>>> Where would I rung these commands from?
>>>
>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> I found my DC with the PDC role by going into ADUC > Operations Master
>>> > PDC
>>>
>>> "Meinolf Weber [MVP-DS]" wrote in message
>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>
>>>> Hello Whiteford,
>>>>
>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> With "PEERS" you can set the time source, either DNS name
>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>
>>>> Here you can find some of them:
>>>> http://www.pool.ntp.org/
>>>> All other DCs will sync with the PDCEmulator and all domain machines
>>>> use one available DC. If there are problems with time sync after
>>>> configuration of the PDCEmulator run on domain machines(can also be
>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>
>>>> After that run:
>>>> net stop w32time
>>>> net start w32time
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> I was just wondering how other make sure their DC's time is kept
>>>>> correct as ours over the months can drift ahead of itself so I
>>>>> change oen DC's time time to the correct time and "net time
>>>>> \\DCname" the others, very manual I know.
>>>>>
>>
>>
>
Re: Sync DC's time with external clock? [message #325298 is a reply to message #325237] Mon, 23 November 2009 06:48 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Whiteford,

Check the event viewer for errors and post them here and also make sure no
firewall is blocking ooirt 123 udp.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I changed the time, by a minute then:
>
> This successfully ran:
>
> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
> /reliable:yes /update
>
> but the time didn't change, I tried again and after I ran:
>
> net stop w32time
> net start w32time
> And still nothing, and I doing this right?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>
>> Hello Whiteford,
>>
>> Run this command on the DC with the PDCEmulator role.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Thanks for finding the time to answer my question.
>>>
>>> Where would I rung these commands from?
>>>
>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> I found my DC with the PDC role by going into ADUC > Operations
>>> Master
>>>
>>>> PDC
>>>>
>>> "Meinolf Weber [MVP-DS]" wrote in message
>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>> Hello Whiteford,
>>>>
>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> With "PEERS" you can set the time source, either DNS name
>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>
>>>> Here you can find some of them:
>>>> http://www.pool.ntp.org/
>>>> All other DCs will sync with the PDCEmulator and all domain
>>>> machines
>>>> use one available DC. If there are problems with time sync after
>>>> configuration of the PDCEmulator run on domain machines(can also be
>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>> After that run:
>>>> net stop w32time
>>>> net start w32time
>>>> Best regards
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> I was just wondering how other make sure their DC's time is kept
>>>>> correct as ours over the months can drift ahead of itself so I
>>>>> change oen DC's time time to the correct time and "net time
>>>>> \\DCname" the others, very manual I know.
>>>>>
Re: Sync DC's time with external clock? [message #325357 is a reply to message #325298] Mon, 23 November 2009 07:52 Go to previous messageGo to next message
Peter[1]  is currently offline Peter[1]  United Kingdom
Messages: 76
Registered: August 2009
Member
The firewalls were not open for udp/123 (doh sorry), do I just need to add
this to a batch file and run once a day?


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
> Hello Whiteford,
>
> Check the event viewer for errors and post them here and also make sure no
> firewall is blocking ooirt 123 udp.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I changed the time, by a minute then:
>>
>> This successfully ran:
>>
>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>> /reliable:yes /update
>>
>> but the time didn't change, I tried again and after I ran:
>>
>> net stop w32time
>> net start w32time
>> And still nothing, and I doing this right?
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>
>>> Hello Whiteford,
>>>
>>> Run this command on the DC with the PDCEmulator role.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Thanks for finding the time to answer my question.
>>>>
>>>> Where would I rung these commands from?
>>>>
>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>> Master
>>>>
>>>>> PDC
>>>>>
>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>> Hello Whiteford,
>>>>>
>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>> /reliable:yes /update
>>>>>
>>>>> With "PEERS" you can set the time source, either DNS name
>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>
>>>>> Here you can find some of them:
>>>>> http://www.pool.ntp.org/
>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>> machines
>>>>> use one available DC. If there are problems with time sync after
>>>>> configuration of the PDCEmulator run on domain machines(can also be
>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>> After that run:
>>>>> net stop w32time
>>>>> net start w32time
>>>>> Best regards
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>> and
>>>>> confers no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> Hello,
>>>>>>
>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>> change oen DC's time time to the correct time and "net time
>>>>>> \\DCname" the others, very manual I know.
>>>>>>
>
>
Re: Sync DC's time with external clock? [message #325369 is a reply to message #325357] Mon, 23 November 2009 08:00 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Whiteford,

Configure the firewall settings fixed to open the port.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The firewalls were not open for udp/123 (doh sorry), do I just need to
> add this to a batch file and run once a day?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
>
>> Hello Whiteford,
>>
>> Check the event viewer for errors and post them here and also make
>> sure no firewall is blocking ooirt 123 udp.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I changed the time, by a minute then:
>>>
>>> This successfully ran:
>>>
>>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>>> /reliable:yes /update
>>>
>>> but the time didn't change, I tried again and after I ran:
>>>
>>> net stop w32time
>>> net start w32time
>>> And still nothing, and I doing this right?
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>>
>>>> Hello Whiteford,
>>>>
>>>> Run this command on the DC with the PDCEmulator role.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Thanks for finding the time to answer my question.
>>>>>
>>>>> Where would I rung these commands from?
>>>>>
>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>> /reliable:yes /update
>>>>>
>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>> Master
>>>>>
>>>>>> PDC
>>>>>>
>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>>> Hello Whiteford,
>>>>>>
>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>> /reliable:yes /update
>>>>>>
>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>>
>>>>>> Here you can find some of them:
>>>>>> http://www.pool.ntp.org/
>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>> machines
>>>>>> use one available DC. If there are problems with time sync after
>>>>>> configuration of the PDCEmulator run on domain machines(can also
>>>>>> be
>>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>>> After that run:
>>>>>> net stop w32time
>>>>>> net start w32time
>>>>>> Best regards
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> Hello,
>>>>>>>
>>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>>> change oen DC's time time to the correct time and "net time
>>>>>>> \\DCname" the others, very manual I know.
>>>>>>>
Re: Sync DC's time with external clock? [message #325370 is a reply to message #325369] Mon, 23 November 2009 08:04 Go to previous messageGo to next message
Peter[1]  is currently offline Peter[1]  United Kingdom
Messages: 76
Registered: August 2009
Member
Sorry, I mean the script to update to the time, should this just be copied
to a batch file and run once a day?


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911da0ef8cc3a6d40f7b0a4@msnews.microsoft.com...
> Hello Whiteford,
>
> Configure the firewall settings fixed to open the port.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> The firewalls were not open for udp/123 (doh sorry), do I just need to
>> add this to a batch file and run once a day?
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
>>
>>> Hello Whiteford,
>>>
>>> Check the event viewer for errors and post them here and also make
>>> sure no firewall is blocking ooirt 123 udp.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> I changed the time, by a minute then:
>>>>
>>>> This successfully ran:
>>>>
>>>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>>>> /reliable:yes /update
>>>>
>>>> but the time didn't change, I tried again and after I ran:
>>>>
>>>> net stop w32time
>>>> net start w32time
>>>> And still nothing, and I doing this right?
>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>>>
>>>>> Hello Whiteford,
>>>>>
>>>>> Run this command on the DC with the PDCEmulator role.
>>>>>
>>>>> Best regards
>>>>>
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>> and
>>>>> confers no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> Thanks for finding the time to answer my question.
>>>>>>
>>>>>> Where would I rung these commands from?
>>>>>>
>>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>> /reliable:yes /update
>>>>>>
>>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>>> Master
>>>>>>
>>>>>>> PDC
>>>>>>>
>>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>>>> Hello Whiteford,
>>>>>>>
>>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>> /reliable:yes /update
>>>>>>>
>>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>>>
>>>>>>> Here you can find some of them:
>>>>>>> http://www.pool.ntp.org/
>>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>>> machines
>>>>>>> use one available DC. If there are problems with time sync after
>>>>>>> configuration of the PDCEmulator run on domain machines(can also
>>>>>>> be
>>>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>>>> After that run:
>>>>>>> net stop w32time
>>>>>>> net start w32time
>>>>>>> Best regards
>>>>>>> Meinolf Weber
>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>> and
>>>>>>> confers no rights.
>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>> ** HELP us help YOU!!!
>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>> Hello,
>>>>>>>>
>>>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>>>> change oen DC's time time to the correct time and "net time
>>>>>>>> \\DCname" the others, very manual I know.
>>>>>>>>
>
>
Re: Sync DC's time with external clock? [message #325371 is a reply to message #325370] Mon, 23 November 2009 08:08 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Whiteford,

Normally this is a one time setting if the client's do NOT use the domain
hierarchie automatic, which they normally do. Check in the event viewer to
see if some problems occur.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Sorry, I mean the script to update to the time, should this just be
> copied to a batch file and run once a day?
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911da0ef8cc3a6d40f7b0a4@msnews.microsoft.com...
>
>> Hello Whiteford,
>>
>> Configure the firewall settings fixed to open the port.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> The firewalls were not open for udp/123 (doh sorry), do I just need
>>> to add this to a batch file and run once a day?
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
>>>
>>>> Hello Whiteford,
>>>>
>>>> Check the event viewer for errors and post them here and also make
>>>> sure no firewall is blocking ooirt 123 udp.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> I changed the time, by a minute then:
>>>>>
>>>>> This successfully ran:
>>>>>
>>>>> w32tm /config /manualpeerlist:uk.pool.ntp.org
>>>>> /syncfromflags:manual /reliable:yes /update
>>>>>
>>>>> but the time didn't change, I tried again and after I ran:
>>>>>
>>>>> net stop w32time
>>>>> net start w32time
>>>>> And still nothing, and I doing this right?
>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>>>>> Hello Whiteford,
>>>>>>
>>>>>> Run this command on the DC with the PDCEmulator role.
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!!
>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> Thanks for finding the time to answer my question.
>>>>>>>
>>>>>>> Where would I rung these commands from?
>>>>>>>
>>>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>> /reliable:yes /update
>>>>>>>
>>>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>>>> Master
>>>>>>>
>>>>>>>> PDC
>>>>>>>>
>>>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>>>>> Hello Whiteford,
>>>>>>>>
>>>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>>>> source: w32tm /config /manualpeerlist:PEERS
>>>>>>>> /syncfromflags:manual /reliable:yes /update
>>>>>>>>
>>>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>>>> (time.windows.com) or an ip address from a reliable time
>>>>>>>> source.
>>>>>>>>
>>>>>>>> Here you can find some of them:
>>>>>>>> http://www.pool.ntp.org/
>>>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>>>> machines
>>>>>>>> use one available DC. If there are problems with time sync
>>>>>>>> after
>>>>>>>> configuration of the PDCEmulator run on domain machines(can
>>>>>>>> also
>>>>>>>> be
>>>>>>>> done with a script): w32tm /config /syncfromflags:domhier
>>>>>>>> /update
>>>>>>>> After that run:
>>>>>>>> net stop w32time
>>>>>>>> net start w32time
>>>>>>>> Best regards
>>>>>>>> Meinolf Weber
>>>>>>>> Disclaimer: This posting is provided "AS IS" with no
>>>>>>>> warranties,
>>>>>>>> and
>>>>>>>> confers no rights.
>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>> ** HELP us help YOU!!!
>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>> Hello,
>>>>>>>>>
>>>>>>>>> I was just wondering how other make sure their DC's time is
>>>>>>>>> kept correct as ours over the months can drift ahead of itself
>>>>>>>>> so I change oen DC's time time to the correct time and "net
>>>>>>>>> time \\DCname" the others, very manual I know.
>>>>>>>>>
Re: Sync DC's time with external clock? [message #325430 is a reply to message #325370] Mon, 23 November 2009 09:10 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Whiteford" <no@no.com> wrote in message
news:uKMwG5EbKHA.5576@TK2MSFTNGP02.phx.gbl...
> Sorry, I mean the script to update to the time, should this just be copied
> to a batch file and run once a day?
>

I don't see why you need a script. In the installations I've worked at or my
customers, whether they are 5 user or 5000 user installations, the default
time service works fine as it is out of the box, as long as it's configured
properly. I provided a link explaining the time service in detail and how to
configure it with various scenarios. I hope you found it useful.

The Windows time service also has a 2-3 minute skew tolerance. It is not as
exact as everyone might think. If you need tighter time integration, such as
down to the second, then you would need to go third party. I've explained
this in my article, as well.

Ace
Re: Sync DC's time with external clock? [message #325432 is a reply to message #325370] Mon, 23 November 2009 09:11 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Did you read my previous post on server names? I don't think you have the
proper name. Once you have this setup there is no script that needs to run
the time service manages itself.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Whiteford" <no@no.com> wrote in message
news:uKMwG5EbKHA.5576@TK2MSFTNGP02.phx.gbl...
> Sorry, I mean the script to update to the time, should this just be copied
> to a batch file and run once a day?
>
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911da0ef8cc3a6d40f7b0a4@msnews.microsoft.com...
>> Hello Whiteford,
>>
>> Configure the firewall settings fixed to open the port.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> The firewalls were not open for udp/123 (doh sorry), do I just need to
>>> add this to a batch file and run once a day?
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
>>>
>>>> Hello Whiteford,
>>>>
>>>> Check the event viewer for errors and post them here and also make
>>>> sure no firewall is blocking ooirt 123 udp.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> I changed the time, by a minute then:
>>>>>
>>>>> This successfully ran:
>>>>>
>>>>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>>>>> /reliable:yes /update
>>>>>
>>>>> but the time didn't change, I tried again and after I ran:
>>>>>
>>>>> net stop w32time
>>>>> net start w32time
>>>>> And still nothing, and I doing this right?
>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>>>>
>>>>>> Hello Whiteford,
>>>>>>
>>>>>> Run this command on the DC with the PDCEmulator role.
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>> and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> Thanks for finding the time to answer my question.
>>>>>>>
>>>>>>> Where would I rung these commands from?
>>>>>>>
>>>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>> /reliable:yes /update
>>>>>>>
>>>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>>>> Master
>>>>>>>
>>>>>>>> PDC
>>>>>>>>
>>>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>>>>> Hello Whiteford,
>>>>>>>>
>>>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>>> /reliable:yes /update
>>>>>>>>
>>>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>>>>
>>>>>>>> Here you can find some of them:
>>>>>>>> http://www.pool.ntp.org/
>>>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>>>> machines
>>>>>>>> use one available DC. If there are problems with time sync after
>>>>>>>> configuration of the PDCEmulator run on domain machines(can also
>>>>>>>> be
>>>>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>>>>> After that run:
>>>>>>>> net stop w32time
>>>>>>>> net start w32time
>>>>>>>> Best regards
>>>>>>>> Meinolf Weber
>>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>>> and
>>>>>>>> confers no rights.
>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>> ** HELP us help YOU!!!
>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>> Hello,
>>>>>>>>>
>>>>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>>>>> change oen DC's time time to the correct time and "net time
>>>>>>>>> \\DCname" the others, very manual I know.
>>>>>>>>>
>>
>>
>
Re: Sync DC's time with external clock? [message #325443 is a reply to message #325432] Mon, 23 November 2009 09:19 Go to previous messageGo to next message
Peter[1]  is currently offline Peter[1]  United Kingdom
Messages: 76
Registered: August 2009
Member
Thanks Paul I'm using your example and it works just fine now.


"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:OA81veFbKHA.1652@TK2MSFTNGP05.phx.gbl...
> Did you read my previous post on server names? I don't think you have the
> proper name. Once you have this setup there is no script that needs to
> run the time service manages itself.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Whiteford" <no@no.com> wrote in message
> news:uKMwG5EbKHA.5576@TK2MSFTNGP02.phx.gbl...
>> Sorry, I mean the script to update to the time, should this just be
>> copied to a batch file and run once a day?
>>
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911da0ef8cc3a6d40f7b0a4@msnews.microsoft.com...
>>> Hello Whiteford,
>>>
>>> Configure the firewall settings fixed to open the port.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>
>>>> The firewalls were not open for udp/123 (doh sorry), do I just need to
>>>> add this to a batch file and run once a day?
>>>>
>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>> news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
>>>>
>>>>> Hello Whiteford,
>>>>>
>>>>> Check the event viewer for errors and post them here and also make
>>>>> sure no firewall is blocking ooirt 123 udp.
>>>>>
>>>>> Best regards
>>>>>
>>>>> Meinolf Weber
>>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>>> confers no rights.
>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>> I changed the time, by a minute then:
>>>>>>
>>>>>> This successfully ran:
>>>>>>
>>>>>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>>>>>> /reliable:yes /update
>>>>>>
>>>>>> but the time didn't change, I tried again and after I ran:
>>>>>>
>>>>>> net stop w32time
>>>>>> net start w32time
>>>>>> And still nothing, and I doing this right?
>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>>>>>
>>>>>>> Hello Whiteford,
>>>>>>>
>>>>>>> Run this command on the DC with the PDCEmulator role.
>>>>>>>
>>>>>>> Best regards
>>>>>>>
>>>>>>> Meinolf Weber
>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>> and
>>>>>>> confers no rights.
>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>> Thanks for finding the time to answer my question.
>>>>>>>>
>>>>>>>> Where would I rung these commands from?
>>>>>>>>
>>>>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>>> /reliable:yes /update
>>>>>>>>
>>>>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>>>>> Master
>>>>>>>>
>>>>>>>>> PDC
>>>>>>>>>
>>>>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>>>>>> Hello Whiteford,
>>>>>>>>>
>>>>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>>>> /reliable:yes /update
>>>>>>>>>
>>>>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>>>>>
>>>>>>>>> Here you can find some of them:
>>>>>>>>> http://www.pool.ntp.org/
>>>>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>>>>> machines
>>>>>>>>> use one available DC. If there are problems with time sync after
>>>>>>>>> configuration of the PDCEmulator run on domain machines(can also
>>>>>>>>> be
>>>>>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>>>>>> After that run:
>>>>>>>>> net stop w32time
>>>>>>>>> net start w32time
>>>>>>>>> Best regards
>>>>>>>>> Meinolf Weber
>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>>>> and
>>>>>>>>> confers no rights.
>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>> Hello,
>>>>>>>>>>
>>>>>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>>>>>> change oen DC's time time to the correct time and "net time
>>>>>>>>>> \\DCname" the others, very manual I know.
>>>>>>>>>>
>>>
>>>
>>
>
>
Re: Sync DC's time with external clock? [message #325574 is a reply to message #325443] Mon, 23 November 2009 12:15 Go to previous message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Good, odds are it wasn't a firewall issue since you would be pulling the
time as opposed to the ntp server pushing the time to you.

Glad you got it all worked out.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Whiteford" <no@no.com> wrote in message
news:eLp%232iFbKHA.5976@TK2MSFTNGP05.phx.gbl...
> Thanks Paul I'm using your example and it works just fine now.
>
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:OA81veFbKHA.1652@TK2MSFTNGP05.phx.gbl...
>> Did you read my previous post on server names? I don't think you have
>> the proper name. Once you have this setup there is no script that needs
>> to run the time service manages itself.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "Whiteford" <no@no.com> wrote in message
>> news:uKMwG5EbKHA.5576@TK2MSFTNGP02.phx.gbl...
>>> Sorry, I mean the script to update to the time, should this just be
>>> copied to a batch file and run once a day?
>>>
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911da0ef8cc3a6d40f7b0a4@msnews.microsoft.com...
>>>> Hello Whiteford,
>>>>
>>>> Configure the firewall settings fixed to open the port.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>
>>>>> The firewalls were not open for udp/123 (doh sorry), do I just need to
>>>>> add this to a batch file and run once a day?
>>>>>
>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>> news:6cb2911da0ce8cc3a6339965d9a@msnews.microsoft.com...
>>>>>
>>>>>> Hello Whiteford,
>>>>>>
>>>>>> Check the event viewer for errors and post them here and also make
>>>>>> sure no firewall is blocking ooirt 123 udp.
>>>>>>
>>>>>> Best regards
>>>>>>
>>>>>> Meinolf Weber
>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>>>>> confers no rights.
>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>> I changed the time, by a minute then:
>>>>>>>
>>>>>>> This successfully ran:
>>>>>>>
>>>>>>> w32tm /config /manualpeerlist:uk.pool.ntp.org /syncfromflags:manual
>>>>>>> /reliable:yes /update
>>>>>>>
>>>>>>> but the time didn't change, I tried again and after I ran:
>>>>>>>
>>>>>>> net stop w32time
>>>>>>> net start w32time
>>>>>>> And still nothing, and I doing this right?
>>>>>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>>>>>> news:6cb2911da0ab8cc3a4e4c51a484@msnews.microsoft.com...
>>>>>>>
>>>>>>>> Hello Whiteford,
>>>>>>>>
>>>>>>>> Run this command on the DC with the PDCEmulator role.
>>>>>>>>
>>>>>>>> Best regards
>>>>>>>>
>>>>>>>> Meinolf Weber
>>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>>> and
>>>>>>>> confers no rights.
>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>> Thanks for finding the time to answer my question.
>>>>>>>>>
>>>>>>>>> Where would I rung these commands from?
>>>>>>>>>
>>>>>>>>> w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>>>> /reliable:yes /update
>>>>>>>>>
>>>>>>>>> I found my DC with the PDC role by going into ADUC > Operations
>>>>>>>>> Master
>>>>>>>>>
>>>>>>>>>> PDC
>>>>>>>>>>
>>>>>>>>> "Meinolf Weber [MVP-DS]" wrote in message
>>>>>>>>> news:6cb2911da0a08cc3a44aa1fedc1@msnews.microsoft.com...
>>>>>>>>>> Hello Whiteford,
>>>>>>>>>>
>>>>>>>>>> Configure the DC with the PDCEmulator FSMO to an external time
>>>>>>>>>> source: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual
>>>>>>>>>> /reliable:yes /update
>>>>>>>>>>
>>>>>>>>>> With "PEERS" you can set the time source, either DNS name
>>>>>>>>>> (time.windows.com) or an ip address from a reliable time source.
>>>>>>>>>>
>>>>>>>>>> Here you can find some of them:
>>>>>>>>>> http://www.pool.ntp.org/
>>>>>>>>>> All other DCs will sync with the PDCEmulator and all domain
>>>>>>>>>> machines
>>>>>>>>>> use one available DC. If there are problems with time sync after
>>>>>>>>>> configuration of the PDCEmulator run on domain machines(can also
>>>>>>>>>> be
>>>>>>>>>> done with a script): w32tm /config /syncfromflags:domhier /update
>>>>>>>>>> After that run:
>>>>>>>>>> net stop w32time
>>>>>>>>>> net start w32time
>>>>>>>>>> Best regards
>>>>>>>>>> Meinolf Weber
>>>>>>>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>>>>>>>> and
>>>>>>>>>> confers no rights.
>>>>>>>>>> ** Please do NOT email, only reply to Newsgroups
>>>>>>>>>> ** HELP us help YOU!!!
>>>>>>>>>> http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>>>>>>>> Hello,
>>>>>>>>>>>
>>>>>>>>>>> I was just wondering how other make sure their DC's time is kept
>>>>>>>>>>> correct as ours over the months can drift ahead of itself so I
>>>>>>>>>>> change oen DC's time time to the correct time and "net time
>>>>>>>>>>> \\DCname" the others, very manual I know.
>>>>>>>>>>>
>>>>
>>>>
>>>
>>
>>
>
Previous Topic:move objects between group policies rights
Next Topic:Re: Default containers in AD
Goto Forum:
  


Current Time: Tue Jan 16 04:23:49 MST 2018

Total time taken to generate the page: 0.05349 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software