Hello, "Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient" This sounds for me that the machine is NOT configured to an external time source. PLEASE RUN ALL FOLLOWING COMMANDS with an ELEVATED COMMAND PROMPT (RUNAS Administrator): Please remove all configuration on the PDCEmulator with: net stop w32time w32tm /unregister w32tm /register net start w32time And now run again the command: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update Please set for PEERS the time source as listed above, either with its ip address or DNS name. If more then one is needed separate them with a space in between and don't forget the quotes: "time.domain.com time1.domain.com" Internet Time servers you can find here: http://www.pool.ntp.org/Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi, I'm struggling with an issue on our PDC. I'm trying to get it to sync to an external source but it's not happening. I've run all the usual commands such as w32tm /config /manualpeerlist:some.timeserver.net /syncfromflags:MANUAL /reliable:YES /update I've also tried everything on this page here but still no luck. Everything is saying it should be using NTP but when I run w32tm /query /configuration I get the following: EventLogFlags: 2 (Local) AnnounceFlags: 5 (Local) TimeJumpAuditOffset: 28800 (Local) MinPollInterval: 6 (Local) MaxPollInterval: 10 (Local) MaxNegPhaseCorrection: 1800 (Local) MaxPosPhaseCorrection: 1800 (Local) MaxAllowedPhaseOffset: 300 (Local) FrequencyCorrectRate: 4 (Local) PollAdjustFactor: 5 (Local) LargePhaseOffset: 50000000 (Local) SpikeWatchPeriod: 900 (Local) LocalClockDispersion: 10 (Local) HoldPeriod: 5 (Local) PhaseCorrectRate: 7 (Local) UpdateInterval: 100 (Local) [TimeProviders] NtpClient (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 1 (Local) InputProvider: 1 (Local) CrossSiteSyncFlags: 2 (Policy) AllowNonstandardModeCombinations: 1 (Local) ResolvePeerBackoffMinutes: 15 (Policy) ResolvePeerBackoffMaxTimes: 7 (Policy) CompatibilityFlags: 2147483648 (Local) EventLogFlags: 0 (Policy) LargeSampleSkew: 3 (Local) SpecialPollInterval: 3600 (Policy) Type: NT5DS (Policy) NtpServer (Local) DllName: C:\Windows\system32\w32time.DLL (Local) Enabled: 1 (Local) InputProvider: 0 (Local) AllowNonstandardModeCombinations: 1 (Local) VMICTimeProvider (Local) DllName: C:\Windows\System32\vmictimeprovider.dll (Local) Enabled: 1 (Local) InputProvider: 1 (Local) which to me says its still using NT5DS and not NTP like everything has been set to This DC holds the Schema Master, Domain Naming Maseter, PDC and RID Pool Manager Any ideas? Cheers

Hello, was the PDCEmulator FSMO transferred from another DC before? If yes, did you also change the previous PDCEmulator for the time sync settings? So you use any GPO for time sync? On my PDCEmulator it looks as expected: [TimeProviders] NtpClient (Local) DllName: C:\Windows\system32\w32time.dll (Local) Enabled: 1 (Local) InputProvider: 1 (Local) AllowNonstandardModeCombinations: 1 (Local) ResolvePeerBackoffMinutes: 15 (Local) ResolvePeerBackoffMaxTimes: 7 (Local) CompatibilityFlags: 2147483648 (Local) EventLogFlags: 1 (Local) LargeSampleSkew: 3 (Local) SpecialPollInterval: 3600 (Local) Type: NTP (Local) NtpServer: ptbtime1.ptb.de ptbtime2.ptb.de (Local) Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi, Unfortunately I've only recently taken over the IT here so I'm not sure what was done before I started, I believe there is a GPO enabled for time syncing. The Default Domain Controllers Policy has been set to Not Configured for everything under Computer Config > Administrative Templates > System > Windows Time Service I'm not sure if that is correct? Cheers

Hello, by default there is no need to configure GPOs for time sync. RSOP.MSC will show you all settigns on the machine. Also there is no problem to run the mentioned command on DCs having NOT the PDCEmulator FSMO. Check the event viewer after running the command and keep in mind that this takes some time to refresh.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

The only a things showing in EV are: 1. The time service has started advertising as a time source. 2. The time service has started advertising as a good time source. 3. Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient

Hello, "Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient" This sounds for me that the machine is NOT configured to an external time source. PLEASE RUN ALL FOLLOWING COMMANDS with an ELEVATED COMMAND PROMPT (RUNAS Administrator): Please remove all configuration on the PDCEmulator with: net stop w32time w32tm /unregister w32tm /register net start w32time And now run again the command: w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update Please set for PEERS the time source as listed above, either with its ip address or DNS name. If more then one is needed separate them with a space in between and don't forget the quotes: "time.domain.com time1.domain.com" Internet Time servers you can find here: http://www.pool.ntp.org/Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

I have run the following commands with an elevated cmd prompt net stop w32time The Windows Time service is stopping. The Windows Time service was stopped successfully. w32tm /unregister W32Time successfully unregistered. w32tm /register W32Time successfully registered. net start w32time The Windows Time service is starting.. The Windows Time service was started successfully. w32tm /config /manualpeerlist:0.uk.pool.ntp.org,0x8 /syncfro mflags:manual /reliable:yes /update The command completed successfully. When doing a w32tm /query /configuration the type is still saying NT5DS

Anyone else have any ideas?

I have run this command and it did not work - as far as I can see its still saying NT5DS (Policy) and not NTP

Hello, have you assured with "netdom query fsmo" that the PDCEmulator FSMO is on that DC? Any errors when using the support tools, if yes please upload the following files: ipconfig /all >c:\ipconfig.txt [all DCs] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file. As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) http://explore.live.com/windows-live-skydrive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

I have just managed to solve this issue, annoyingly there was a GPO that was over riding anything I was doing Thank you for all you help

Hello, thanks for the feedback about the solution with GPO overriding.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.