Time Out-of-Sync
Issue
Clients machine face time sync
issue with DC
Action taken:
- Logon to target DC AMMUSDC01
- Check time configuration via command w32tm /query
/configuration
C:\Windows\system32>w32tm
/query /configuration
[Configuration]
EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800
(Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 172800
(Local)
MaxPosPhaseCorrection: 172800
(Local)
MaxAllowedPhaseOffset: 300
(Local)
FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000
(Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10
(Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)
[TimeProviders]
NtpClient (Local)
DllName:
C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations:
1 (Local)
ResolvePeerBackoffMinutes: 15
(Local)
ResolvePeerBackoffMaxTimes: 7
(Local)
CompatibilityFlags: 2147483648
(Local)
EventLogFlags: 1 (Local)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600
(Local)
Type: NTP (Local)
NtpServer: timeserver (Local)
NtpServer (Local)
DllName: C:\Windows\system32\w32time.dll
(Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations:
1 (Local)
VMICTimeProvider (Local)
DllName:
C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
- Check the time source via command w32tm /query /source
C:\Windows\system32>w32tm
/query /source
VM IC Time Synchronization
Provider
- Reset time service setting to default and Disable to time
sync from time to time from host
net stop w32time
w32tm /unregister
w32tm /register
reg add
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider
/v Enabled /t reg_dword /d 0
net start w32time
- Confirm now that DC sync time from DC hold PDC role
W32tm /resync
/rediscover
W32time /resync /force
W32tm /query /status
Recommendation:-
- Disable to time sync from time to time from host on all
Virtual machine and DCs via below command
net stop w32time
reg add
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider
/v Enabled /t reg_dword /d 0
net start w32time
- Stop integration Services “time synchronization”
For more information:
How the Windows Time Service Works
From
<https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/windows-time-service/how-the-windows-time-service-works>
How to configure an authoritative time server in Windows
Server
From
<https://support.microsoft.com/en-us/help/816042/how-to-configure-an-authoritative-time-server-in-windows-server