Hi all, we have one empty windows 2003 SP2 root doamin and one child domain with several windows 2003 and windows 2008 doamin controllers. we configured one root PDC domain controller as internal hardware clock time server. Should all workstations which log onto the domain get the same time? Currently, several workstations will not get time properly. how should I troubleshoot this? Thank you.

By default, your client computers sync time with the PDC Emulator role holder. Make sure that your client computers are not using a NTP server to sync time. Make sure that SYSTEM\CurrentControlSet\services\W32time\Parameters\Type is set to NT5DS on your client computers. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Hello, the empty root domain concept is really old and should not be used anymore. Just 2 more licenses and additional hardware which must be backed up also. For the time service confiogure the child domain PDCEmulator DC to use the root PDCEmulator DC as the time source. If domain member machines do not use an available DC of the domain then make sure port123 UDP is not blocked from firewalls. On a problem machine run: w32tm /config /syncfromflags:domhier /update After that you have to run: net stop w32time net start w32time Additional information about the domain time see in my blog: http://msmvps.com/blogs/mweber/archive/2010/06/27/time-configuration-in-a-windows-domain.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

>For the time service confiogure the child domain PDCEmulator DC to use the root PDCEmulator DC as the time source Do I need to configure all chiild domain controllers to use the root PDCEmulator as the time source? I thought it should work without any additional configurations. What's the command I need to run the child DCs if I need to configure? Thank you.

Hello, i am not talking about all child DCs, only about the child domain PDCEmulator. Please check with "netdom query fsmo" on a child domain DC to see which one it is. The child domain DCs should automatically use the child domain PDCEmulator. If not you can run on them: w32tm /config /syncfromflags:domhier /update After that you have to run: net stop w32time net start w32timeBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.