Event ID 1, The system time has changed....to the future! RRS feed

  • Question

  • Hi, I've seen this questions asked before, but it's normally in a larger 2008 r2 server environment, or at least in a larger network environment.  I'm currently running Windows 7 pro, 64 bit, on a desktop directly connected to the internet (no wireless).  My exact error message is confusing because it's briefly changing my system time to the next day.

    The system time has changed to ‎2013‎-‎07‎-‎14T02:49:41.500000000Z from ‎2013‎-‎07‎-‎13T21:15:03.905498100Z.

    The current time was actually 7/13/2013 9:49:41pm.

    This is happening 3 or 4 times a day.  I haven't found any fixes for this for my environment.  I have one laptop that connects to this environment, but it connects fairly rarely, and I don't have the time issue with that laptop.  Thank you in advance.

    Sunday, July 14, 2013 3:08 AM


  • Hi,
    This issue may be caused by some third party applications.
    Enable Audit Privilege Use. Go to Event Viewer, check the Windows security logs and see if any related entries, keywords: Event ID: 4616; Task Category: Security State Change were logged. This will help us to find out which process that was making the change.

    Tracy Cai
    TechNet Community Support

    • Marked as answer by tracycai Thursday, July 18, 2013 5:55 AM
    Monday, July 15, 2013 8:20 AM