Answered by:
NTP on Windows Server 2008 ( not working )

Question
-
Hi ALL,
Recently i have been trying to sync time between A NTP server and A NTP client. Along the way, i met with a one weird problem. My machine are not connected to a domain but they are of the same workgroup. I have disabled the Firewall. Below is the explanation to the problem.
Let say I have two Virtual Machine.
Machine A
Username: Administrator
Password: 1234567
Machine B
Username: Administrator
Password: 1234567
WIth such a setttings, i was able to sync the time of the client with the server.
However the problems arises when the Username or trhe password are different from the two server.
Lets say if anyone of them changes their password. I will not be able to sync the time anymore...
The console wil return a
"System error 5 has occurred. Access is denied".
Can anyone provides me with a explanation or a work around of this problem??
Thank you and Regards.
Thursday, November 15, 2012 7:35 AM
Answers
-
I would also not recommend to sync time from third party software instead you can configure authorative time server on PDC role holder server as below.
Configuring the time service on the PDC Emulator FSMO role holder
http://msmvps.com/blogs/acefekay/archive/2009/09/18/configuring-the-windows-time-service-for-windows-server.aspx
Please also make sure that udp port 123 which as direction the chosen NTP server is not blocked.
For other domain computers / servers, make sure that they are using NT5DS for time sync. More here: http://support.microsoft.com/kb/223184
If any time sync software is installed on DC uninstall the same.Also since the server is hosted on VM you need to disable the time sync from VM to hosthttp://msmvps.com/blogs/acefekay/archive/2011/08/23/virtualizing-domain-controllers-and-the-windows-time-service.aspx
You can also refer below links for more on Time service.
Jorge's Time Service blogs:
Configuring and Managing the Windows Time Service, Parts 1 to 4:
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-1.aspx
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-2.aspx
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-3.aspx
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-4.aspxHope this helps
Best Regards,
Sandesh Dubey.
MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.- Marked as answer by Cicely Feng Friday, November 23, 2012 8:21 AM
Sunday, November 18, 2012 12:04 AM
All replies
-
Hi,
Your question is bit confusing, what exactly are you doing?
In your question you said that it is workgroup and servers. Please confirm are these 2 servers in the domain, if your answer is yes then let us know the DCDiag log. Also check the replication status between DCs. Coming to Access Denied, add that user account to administrators account and domain admin account then try. Disable Time Sync with Host machine from VM Tool from task bar on both the DCs.
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1189
Thursday, November 15, 2012 7:45 AM -
Hi,
Thx for the reply. Sorry for the poor explanation.
I am trying to setup a Time server and then have some Clients sync their time in accordance to the server.
Right now, I have two Virtual machine, both installed with windows server 2008 database. They don't belong to any domain. Just two standalone Virtual machine with network of the same subnet mask. Machine A, 200.200.200.1/24 Machine B, 200.200.200.2.
Machine B ( client ) was able to sync its time with Machine A ( Time Server ). When both of their Username and Password are of the same.
I ran both machine on Administrator account.
When i change the password of one of the machine, the whole system doesn't work.
In short, The ntp only works when both of their username and password are the same. When its different it doesn't work.That the problem. Hope you can understand.
- Edited by Vmwarenoob Thursday, November 15, 2012 8:08 AM
Thursday, November 15, 2012 8:02 AM -
First of all an Active Directory Domain Controller (DC) dosen't act as an NTP server it act as a time server (source) for domain joined machines only and they are NOT using NTP to sync time. If you're looking for configure an NTP server (that uses the NTP protocol) you have to use 3'party software.
The scenario you describe with access being granted between two machines that don't belong the same domain or to two diffrent domains that trust each other, what you see is by design.Enfo Zipper Christoffer Andersson – Principal Advisor
Thursday, November 15, 2012 8:19 AM -
I agree with Christoffer, as you are not using domain environment and AD is not installed on any server you can make both the servers as NT5DS. Because stand alone servers does not require NTP configuration.Thursday, November 15, 2012 8:23 AM
-
Hi,
So right now using a 3rd party software is the only way i can set up a time server and have the client to sync with it?
or
the other way is to have both the adminstrator password to be of the same for both the the NTP SERVER and its clients connecting to it?
If that the case, do you know of any 3rd party software??
Thanks
- Edited by Vmwarenoob Thursday, November 15, 2012 8:32 AM
Thursday, November 15, 2012 8:27 AM -
You don't need to use thirdparty software use below link and configure one of you standalone system as time server and get all other syncronised with it
http://support.microsoft.com/?kbid=120944
Hope it helps __________________________ Best regards Sarang Tinguria MCP, MCSA, MCTS Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Thursday, November 15, 2012 9:59 PM -
Hi Sarang_Tinguria,
I went through the link you have pasted, tried using that command.
NET TIME \\<IP> /Set /Yes
The command returns back:
"System error 5 has occurred. Access is denied".
Again, it only occurs when the password is not the same. It works perfectly fine when the password is the same.
Friday, November 16, 2012 1:03 AM -
try giving loopback ip and run on the machine where u want to set NTP server
Hope it helps __________________________ Best regards Sarang Tinguria MCP, MCSA, MCTS Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Friday, November 16, 2012 2:12 AM -
Hi,
The NTP server works fine. my Client was able to connect to the NTP server to sync the time. ( when the password are the same ).
It started screwing up when i have clients and ntp servers not having the same password.
Friday, November 16, 2012 4:22 AM -
Hi,
The NTP server works fine. my Client was able to connect to the NTP server to sync the time. ( when the password are the same ).
It started screwing up when i have clients and ntp servers not having the same password.
I haven't tested this but you can use atomic clock to sync the time.
http://www.worldtimeserver.com/atomic-clock/
Awinish Vishwakarma - MVP
My Blog: awinish.wordpress.com
Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.Friday, November 16, 2012 12:34 PM -
I would also not recommend to sync time from third party software instead you can configure authorative time server on PDC role holder server as below.
Configuring the time service on the PDC Emulator FSMO role holder
http://msmvps.com/blogs/acefekay/archive/2009/09/18/configuring-the-windows-time-service-for-windows-server.aspx
Please also make sure that udp port 123 which as direction the chosen NTP server is not blocked.
For other domain computers / servers, make sure that they are using NT5DS for time sync. More here: http://support.microsoft.com/kb/223184
If any time sync software is installed on DC uninstall the same.Also since the server is hosted on VM you need to disable the time sync from VM to hosthttp://msmvps.com/blogs/acefekay/archive/2011/08/23/virtualizing-domain-controllers-and-the-windows-time-service.aspx
You can also refer below links for more on Time service.
Jorge's Time Service blogs:
Configuring and Managing the Windows Time Service, Parts 1 to 4:
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-1.aspx
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-2.aspx
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-3.aspx
http://blogs.dirteam.com/blogs/jorge/archive/2010/09/26/configuring-and-managing-the-windows-time-service-part-4.aspxHope this helps
Best Regards,
Sandesh Dubey.
MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.- Marked as answer by Cicely Feng Friday, November 23, 2012 8:21 AM
Sunday, November 18, 2012 12:04 AM -
Vmwarenoob,
Take a look it this software it contains both ntp client and server apps, also it can work using its own time protocol
Sunday, February 24, 2013 7:00 PM