none
Question, Windows Time Service

    Question

  • Hi, My scenary is the follow:

    Active Directory (Windows Server 2008 R2)

    I have a NTP Server (spectracom) this server provide time sincronization in all servers and computers, However the NETCLOCK software disables the W32tm service on servers, and uses its own software to update the time...

    the question is: I'll have a problem on domain controllers if disabled the W32tm service...

    Thanks for Help...


    A-BAT

    Monday, June 11, 2012 10:49 PM

Answers

  • You just need your PDCe in your forest root to sync with the NTP server and then let the windows time hierarchy take over from there.  There are a lot of great article on time.

    One good one   http://tigermatt.wordpress.com/2009/08/01/windows-time-for-active-directory/

    You can search for more articles.

    Thanks

    Mike


    http://adisfun.blogspot.com
    Follow @mekline

    Monday, June 11, 2012 11:44 PM
  • Kerberos authentication is dependent on the correct time if the time difference is more then 5 min domain authentication will fail. Other have pointed out correctly, it should be just PDC emulator should be syncing the time from the reliable or external source & domain clients as welll as other DC should follow domain hierarchy i.e. dc holding the PDC role.

    The port 123 UDP is required by time services, so you don't want to change the default behavior.

    Windows Time Server Role in AD Forest/Domain  http://awinish.wordpress.com/2011/10/07/time-server-role-in-forestdomain/


    Awinish Vishwakarma - MVP - Directory Services

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Tuesday, June 12, 2012 9:00 AM
  • Hi, My scenary is the follow:

    Active Directory (Windows Server 2008 R2)

    I have a NTP Server (spectracom) this server provide time sincronization in all servers and computers, However the NETCLOCK software disables the W32tm service on servers, and uses its own software to update the time...

    the question is: I'll have a problem on domain controllers if disabled the W32tm service...

    Thanks for Help...


    A-BAT

    Curious, what is the purpose of the third party time sync software? Did you find the default Windows Time Service and hierarchy ineffective for your needs? The Time serice works out of the box without any configuration other than simply setting the PDC emulator to sync with an outside source. That's it.

    I can understand if this is a financial company dealing with the stock market where the SEC requires down to the split second transaction records that the Windows time service does not support down to split second timing.

    .


    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008/R2, Exchange 2007 & Exchange 2010, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services
    Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php

    This post is provided AS-IS with no warranties or guarantees and confers no rights.

    FaceBook Twitter LinkedIn

    Tuesday, June 12, 2012 3:31 PM

All replies