Windows 2000/2003 server time sync

[rwilliams3]

BACKGROUND

I am having problems getting my servers to synchronize their clocks.

I have a single domain/forest with about 10 different servers - 4 of them are domain controllers and a mix of WinSrv 2000 & 2003.

I have verified that my primary controller (\\server1) is the PDC, RID & Infrastructure Operations Master by looking at my domain in Active Directory Users & Computers.

Server1 is a Win2003 server so I followed the directions in Microsoft's KB Article ID:816042 and set Server1 to be the authoritative time server using it's internal hardware clock

http://support.microsoft.com/kb/816042/

On Server1 at DOS prompt, I typed:
-net time /setsntp:time.windows.com,0x1
it shows command completed successfully

-net time /querysntp
it shows the current SNTP value is: time.windows.com,0x1

-net time
it shows current time at \\server1 is [correct time]

QUESTION #1
In MSKB ID 816042, it says that "the PDC master must not be configured to synchronize with itself". Doesn't my "net time" above show that it is is sync'ing with itself? How can I change that?

QUESTION #2
From a DOS prompt on Server2 (W2003 server domain controller) I run "w32tm /resync /rediscover". It comes back with error "Sending resync command to local computer... The computer did not resync because no time data was available." What's going on here?

QUESTION #3
Should I be able to go to a DOS promt and type "telnet time.windows.com 123" and get a positive response? I get "Connecting to time.windows.com... Could not open connection to the host, on port 123: connection failed". I've verified with my firewall guys that port 123 is open and they can see out going traffic, but no responses coming back.

thanks,

RW


rwilliams3

frw3837-forums @ yahoo.com

 

[WhoKilledKenny]

1. The PDC emulator should sync its time with an outside source for example ntp2.usno.navy.mil
So the command would be NET TIME \\PDC /SETSNTP:ntp2.usno.navy.mil
You can find a number of time sources on the internet, just google it...

2. Once that has been completed, any computer you add to your domain should sync time with your PDC emulator, by default.

3. If you wish to force a time sync the command from any computer on the domain (not the PDC) would be:
NET TIME /DOMAIN:yourdomainname /SET

 

[WhoKilledKenny]

Just to make clear... you don't have to set an external time server if you do not want to. The mail point is that your domain memebers should sync their clocks with the PDC emaulater by default, being a memeber of the domain.

 

[dglienna]

#3, Nope. Tried a few years ago. I think it uses a different port then Telnet.

-David
2006 & 2007 Microsoft Most Valuable Professional (MVP)
2006 Dell Certified System Professional (CSP)