Clicky

Hello,

I have Server 2008 R2 Standard which functions as AD, all our computers, most Win XP and some Win 7, synchronize time with AD server. The time on AD server is 5 min fast, how can I make sure that AD has correct time and all work computers sync with it?

asked 12/15/2011 01:25

Sergey_Nesterenko's gravatar image

Sergey_Nesterenko ♦♦


10 Answers:
This should help.
http://www.ozzu.com/mswindows-forum/how-configure-ntp-server-windows-2003-server-t91197.html


First you need to configure the domain controller to sync with a reliable time source. If you have two or more domain controllers you should find the one that is acting as the PDC. To sync it with a time source open up a command prompt and perform the following:

Stop the time service
Code: [ Select ]net stop w32time <enter>


Then configure the time source
Code: [ Select ]w32tm /config /manualpeerlist:XXX.XXX.XXX.XXX,0x8 /syncfromflags:MANUAL /reliable:yes /update <enter>


The X's can be the IP address of the time server or the domain name of a time server such as time-a.nist.gov.

Once the command above is done you need to start the W32Time service
Code: [ Select ] [ Line Numbers Off ]
net start w32time <enter>
w32tm /resync <enter>

01.net start w32time <enter>
02.w32tm /resync <enter>


The <enter> means to press the enter key.

Next you need to sync all of your client PC's to the domain controller. You can do the following from the command line.

Code: [ Select ] [ Line Numbers Off ]
net stop w32time <enter>
w32tm /config /manualpeerlist:peers /syncfromflags:DOMHIER /update <enter>
net start w32time <enter>
w32tm /resync </enter>

01.net stop w32time <enter>
02.w32tm /config /manualpeerlist:peers /syncfromflags:DOMHIER /update <enter>
03.net start w32time <enter>
04.w32tm /resync </enter>

You can remotely run these commands using psexec from SysInternals if you have a lot of client machines.
link

answered

TG-TIS's gravatar image

TG-TIS

Here is a good link from TigerMatt on how time works in a domain.

http://tigermatt.wordpress.com/2009/08/01/windows-time-for-active-directory/

This will show you how to setup as well
link

answered 2011-12-15 at 09:55:02

dariusg's gravatar image

dariusg

I have ran the following command on my AD server

w32tm /config /manualpeerlist:”uk.pool.ntp.org,0×8 europe.pool.ntp.org,0×8¿ /syncfromflags:MANUAL /reliable:yes /update

Now the article says I should wait for the server to sync with time server, how can I check when the AD server will sync with time server?

There is an option to force sync but it says it will work if the time difference is about 2 min, but my server is 5 min fast.

Should I just wait for the AD to sync with Time server?

Thank you
link

answered 2011-12-15 at 10:16:39

Sergey_Nesterenko's gravatar image

Sergey_Nesterenko

If you open a command prompt and run these commands one at a time, it shiuld sync within seconds

Here are the commands I have in a Batch file that is scheduled to run daily on one of my servers. it works great.

net stop w32time
net start w32time
w32tm /config /manualpeerlist:129.6.15.28,0x8 /syncfromflags:MANUAL /reliable:yes /update
w32tm /resync /rediscover
net stop w32time
net start w32time
link

answered 2011-12-16 at 09:04:14

TG-TIS's gravatar image

TG-TIS

Thank you very much, that worked, how do I now force all servers and desk tops to sync its time with AD?
link

answered 2011-12-16 at 09:20:27

Sergey_Nesterenko's gravatar image

Sergey_Nesterenko

If you ran this on your primary DC, everytime you retart a domain workstation, the time of the workstation should auto sync with the DC.
link

answered 2011-12-16 at 09:39:53

TG-TIS's gravatar image

TG-TIS

I can't easily just restart some of the servers, is there a command I can run on a server that will force it to sync with AD?

Thank you,

Sergey
link

answered 2011-12-16 at 09:45:23

Sergey_Nesterenko's gravatar image

Sergey_Nesterenko

If you can restart some of the workstations, that should sync them immediately.
link

answered 2011-12-16 at 10:02:21

TG-TIS's gravatar image

TG-TIS

This command will sync the client or member server to the DC.

http://technet.microsoft.com/en-us/library/cc758905(WS.10).aspx
link

answered 2011-12-16 at 10:22:21

dariusg's gravatar image

dariusg

Thank you very much!!

Now all my servers and work stations have correct time!!
link

answered 2011-12-16 at 10:22:52

Sergey_Nesterenko's gravatar image

Sergey_Nesterenko

Your answer
[hide preview]

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Tags:

×39
×48

Asked: 12/15/2011 01:25

Seen: 314 times

Last updated: 12/16/2011 02:56