locked
Windows Time Service registry entries RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I've browsed around a number of blogs and posts about setting up the time service in a Windows AD domain 

    Checking through current settings (forest level w2k3, most DCs are w2k8r2):

    w32tm /dumpreg /subkey:parameters /computer:memberservername

    I get entries:

    Type: NT5DS

    NtpServer: time.windows.com

    QUESTION:  If the "Type" is set to NT5DS, is the "NtpServer" entry not used, or irrelevant?  Or should this entry match the time source our PDC is using?

    Our PDC is pointing to another time source than what is listed in this registry entry.

    Thanks

    Monday, February 23, 2015 4:17 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Based on my research, the value NT5DS means the time service synchronizes from the domain hierarchy, which is normal as the way I see it. All domain computers other than the PDC from root domain should be synchronizing time from domain hierarchy.

    In addition, the value of the registry entry above should not match the one from the PDC of the root domain.

    More information for you:
    Windows Time Service

    https://technet.microsoft.com/en-us/library/bb490845.aspx

    Registry entries for the W32Time service

    https://support.microsoft.com/kb/223184/en-us

    Best Regards,

    Amy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by DWO2015 Tuesday, February 24, 2015 1:01 PM
    Tuesday, February 24, 2015 7:13 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Based on my research, the value NT5DS means the time service synchronizes from the domain hierarchy, which is normal as the way I see it. All domain computers other than the PDC from root domain should be synchronizing time from domain hierarchy.

    In addition, the value of the registry entry above should not match the one from the PDC of the root domain.

    More information for you:
    Windows Time Service

    https://technet.microsoft.com/en-us/library/bb490845.aspx

    Registry entries for the W32Time service

    https://support.microsoft.com/kb/223184/en-us

    Best Regards,

    Amy

    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by DWO2015 Tuesday, February 24, 2015 1:01 PM
    Tuesday, February 24, 2015 7:13 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I have already started a Wiki to describe how time sync should be configured in an AD forest: http://social.technet.microsoft.com/wiki/contents/articles/18573.time-synchronization-in-active-directory-forests.aspx

    This posting is provided AS IS with no warranties or guarantees , and confers no rights.

    Ahmed MALEK

    My Website Link

    My Linkedin Profile

    My MVP Profile

    Tuesday, February 24, 2015 9:55 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thank you.  I found what I was looking for in the first link:

    NtpServer

    Establishes a space-delimited list of peers from which a computer obtains time stamps, consisting of one or more DNS names or IP addresses per line. Computers connected to a domain must synchronize with a more reliable time source, such as the official U.S. time clock. This setting is used only when Type is set to NTP or AllSync.

    Tuesday, February 24, 2015 1:02 PM