tjnelson
(tjnelson)
September 12, 2014, 5:53pm
1
It seems all my DC’s have the correct time but all the domain computers are slow by a little over 5min. I have been searching and following the instructions and nothing seems to be working.
I have followed this guide and done this command.
w32tm /config /manualpeerlist: peers /syncfromflags:MANUAL
followed by
w32tm /resync
and restarted the w32time service. I have re synced all domain controllers as well.
I then decided to make my own group policy with this guide and even after forcing the group policy all the computers time is still behind. any help would be much appreciated.
4 Spice ups
arsham
(Arsham)
September 12, 2014, 6:01pm
2
Do you have last updates installed?
Is there any GPO in place to prevent some changes?
Arsham
tjnelson
(tjnelson)
September 12, 2014, 6:03pm
3
no to both. why would it stop all of a sudden without updating? updates seem to destroy my domain more than help.
there is no GPO in place to stop changes I do not think. how could someone change the time settings?
w32tm /config /manualpeerlist: peers /syncfromflags:MANUAL
Peers actually means to put in the name of an NTP server. w32tm won’t be able to resolve “peers” so it will not update the time.
try:
w32tm /config /manualpeerlist:1.uk.pool.ntp.org /syncfromflags:MANUAL
2 Spice ups
tjnelson
(tjnelson)
September 12, 2014, 6:11pm
5
o yea I used 0.north-america.pool.ntp.org instead. I should have been more specific.
You listed the command that you used, that command was invalid. If you are not going to give accurate information it is impossible to help.
I wish you luck with the problem.
bsod
(BSOD'D)
September 12, 2014, 6:15pm
7
Try this on the PDC, or the DC you are using as the time server
net stop w32Time
w32tm /unregister
w32tm /register
net start w32time
w32tm /resync
Once that is done then try a sync on one of the clients.
run
w32tm /config /syncfromflags:domhier /update
net stop w32time
net start w32time
3 Spice ups
johndod
(Caur)
September 12, 2014, 6:15pm
8
I used this one:
w32tm /config /manualpeerlist:“time.nist.gov ” /syncfromflags:manual /reliable:yes /update
1 Spice up
Run this command from a domain computers command shell.
netdom query fsmo
That will tell you where they are syncing the time from. Should be your DC’s but worth checking to make sure.
1 Spice up
tjnelson
(tjnelson)
September 12, 2014, 6:24pm
10
I checked who holds all the fsmo rules and I am configuring the time settings on the right DC. when running
w32tm /unregister
w32tm /register
I get a access is denied. (0x80070005)
also when trying to resync a client computer using
w32tm /config /syncfromflags:domhier /update
i get the same "access is denied. (0x80070005)
bsod
(BSOD'D)
September 12, 2014, 6:45pm
12
Make sure you right-click and run as Administrator, even if you are an admin on the machine
1 Spice up
tjnelson
(tjnelson)
September 12, 2014, 7:20pm
13
yea I ran cmd’s as an administrator and redid all the command successfully except for one. I even re-synced a client computer successfully, but the computer is still 6 min behind.
w32tm /resync on the domain controller shows “sending resync command to local computer. The computer did not resync because no time data was available.”
this is super weird. thanks again for everyone’s help
bsod
(BSOD'D)
September 12, 2014, 7:37pm
14
That error suggests your GPO is 1. Wrongly configured or 2. Gone South
Delete the GPO that you currently have configured for time sync and start again, making sure all your settings are correct.
1 Spice up
tjnelson
(tjnelson)
September 15, 2014, 6:24pm
15
looks like most computers will re-sync after a reboot. Thought it should re-sync through GPO without a reboot. I will re post if there is still problems
bsod
(BSOD'D)
September 16, 2014, 3:57am
16
GPO takes a gpupdate from command line once the gpo is in place. A restart of the machine would pull down the gpo and your sync would have been done.
Glad you got a result.