+ Post New Thread
Results 1 to 12 of 12
Windows Server 2000/2003 Thread, time is 10 mins fast in Technical; win 2003 the time is out by about 10 mins. have tried resetting to correct time but keeps going back ...
  1. #1

    Join Date
    Feb 2008
    Location
    south coast
    Posts
    173
    Thank Post
    0
    Thanked 2 Times in 1 Post
    Rep Power
    13

    time is 10 mins fast

    win 2003 the time is out by about 10 mins.
    have tried resetting to correct time but keeps going back to 10 mins fast again.
    it is a fairy new server so cant imagine the watch battery playing up,
    we are remotely connected via another server elsewhere if this could cause probs??

  2. #2

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,855
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    181
    Yes, Windows machines in a domain will sync to each other, which is why your time drifts. Who controls your domain?

  3. #3

    Join Date
    Feb 2008
    Location
    south coast
    Posts
    173
    Thank Post
    0
    Thanked 2 Times in 1 Post
    Rep Power
    13
    Quote Originally Posted by powdarrmonkey View Post
    Yes, Windows machines in a domain will sync to each other, which is why your time drifts. Who controls your domain?
    we are controlled by the priory group whos HQ is in bristol somewhere i think,
    we are Lyndhurst, Southampton.

    Its a pain as quite alot of the staff use that time to know when change of lessons etc.

  4. #4

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,134
    Thank Post
    352
    Thanked 577 Times in 474 Posts
    Rep Power
    142
    Yer AD uses kerbious which is time-based. Check your (DNS\DHCP) NTP\router settings.

    EDIT:

    Moan at HQ. Get them to check NTP settings.

  5. #5
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    849
    Thank Post
    32
    Thanked 120 Times in 102 Posts
    Rep Power
    37
    Lucky... we changed the time by 1 minutes and locked everyone out of the domain...

    I'd love to get it 5 minutes slower!

  6. #6

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,855
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    181
    Quote Originally Posted by DrPerceptron View Post
    Lucky... we changed the time by 1 minutes and locked everyone out of the domain...

    I'd love to get it 5 minutes slower!
    Yes, changing the time by more than 5 minutes (by default) will break Kerberos (everybody's tickets become invalid, including machines') so don't. Get it changed upstream by one minute every 48 hours.

  7. #7

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,134
    Thank Post
    352
    Thanked 577 Times in 474 Posts
    Rep Power
    142
    Surely changing the DHCP to use a correct NTP server, then manually changing the servers NTP server would be better. The worst thing would be getting the clients to restart.

  8. #8

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,855
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    181
    Quote Originally Posted by matt40k View Post
    Surely changing the DHCP to use a correct NTP server, then manually changing the servers NTP server would be better. The worst thing would be getting the clients to restart.
    But at the moment it works; a gradual alignment is much less upheaval.

    Besides, this isn't a DHCP problem, it's to do with Kerberos and domain-based NTP.

  9. #9

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,134
    Thank Post
    352
    Thanked 577 Times in 474 Posts
    Rep Power
    142
    Fair point about less upheaval.

    My point about DHCP would be to define the new time servers (NTP) within DHCP so when the machine requests and IP (pre-joining the domain) it should get the NTP servers and update BEFORE trying to connect to the AD.

    Still this is just on paper, so I could be talking out of my arse.

  10. #10

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,855
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    181
    Quote Originally Posted by matt40k View Post
    Fair point about less upheaval.

    My point about DHCP would be to define the new time servers (NTP) within DHCP so when the machine requests and IP (pre-joining the domain) it should get the NTP servers and update BEFORE trying to connect to the AD.

    Still this is just on paper, so I could be talking out of my arse.
    If the machine is already a member, the time replication is built into AD as part of logon, so DHCP has very little to do with it. And if you're joining the domain, the time is synced at this point so that when you reboot, you're able to get a Kerberos ticket straight away.

  11. #11

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,134
    Thank Post
    352
    Thanked 577 Times in 474 Posts
    Rep Power
    142
    So changing the server should update the clients. Doing it 1min at a time would stop people being kicked? Right?

  12. #12

    powdarrmonkey's Avatar
    Join Date
    Feb 2008
    Location
    Alcester, Warwickshire
    Posts
    4,855
    Thank Post
    412
    Thanked 777 Times in 650 Posts
    Rep Power
    181
    Quote Originally Posted by matt40k View Post
    So changing the server should update the clients. Doing it 1min at a time would stop people being kicked? Right?
    Right. But you should allow at least 48 hours between changes, assuming that most clients are used during this time, and assuming that you haven't changed Kerberos to be less tolerant (eg. you've set the tolerance to 1 min instead of the default of 5).

  13. Thanks to powdarrmonkey from:

    matt40k (26th January 2009)

SHARE:
+ Post New Thread

Similar Threads

  1. Can't get sound on Fast Phonics First
    By speckytecky in forum Educational Software
    Replies: 2
    Last Post: 15th July 2009, 11:35 AM
  2. Fast Reconnect
    By Bobo in forum Windows
    Replies: 2
    Last Post: 21st November 2008, 10:05 PM
  3. fast user logon
    By strawberry in forum Windows
    Replies: 0
    Last Post: 21st November 2007, 09:11 AM
  4. Assessment Manager taking 5-10 Mins to load
    By the.damon in forum MIS Systems
    Replies: 0
    Last Post: 2nd July 2007, 01:17 PM
  5. Event Log Every 5 Mins in Windows 2k Server
    By mrtechsystems in forum Windows
    Replies: 11
    Last Post: 26th June 2005, 09:50 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •