hi friends i have a windows server 2003 AD which is synced with a time server...all other PCs in the network are part of this domain..but in all the PC / server the in registry settings of w32timer service the parameter is pointing to time.windows.com. is this by default ?? because the time shown in PC and AD are one and same....kindly clarify...also we have AD-SSO in our environment. once the time in AD had difference of 5 min and the kerberso ticket could not be passed to Oracle SSO server...what are the various reasons that could have caused this. In the event viewer only the problems have been reported. I need the cause for this. Please provide a solution M C JayanarayanM C Jayanarayan

Hello, the time server is always written in the registry, i assume you talk about HKLM\system\ccs\services\w32time\parameters\ntpserver? Important is that the "Type" value in the same location is "NT5DS" which means to use domain time sync. See here how to setup time in a domain and if needed to start fresh with resetting the time service to default: http://msmvps.com/blogs/mweber/archive/2010/06/27/time-configuration-in-a-windows-domain.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

thank you sir....i understood it clearly now.........now i want to know what could be the reasons for AD time lag of 5 min with local time server... M C Jayanarayan

Hello, the local time server is what kind of machine and is it domain member? Is UDP port 123 open? The DC having the PDCEmulator FSMO is using the time server as source?Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

the local time server is running on Linux....we are not synchronizing with outside world. the time server is pointing to local time of Linux machine. only. Yes the DC is pointing to this time server only....all other domain PCs are pointing to the domain controller. M C Jayanarayan