Time jumping issue (no access to ntp server)
The problem: My only domain controller time keeps jumping either forwards or backwards a amount between 2 hours and 24 hours.
I run 4 virtual 2008r2 servers and one physical, all connected to the domain.
The virtual servers run on VMware across two machines.
The setup has been pretty static for the last 6 months.
The time across the domain started jumping a few days ago.
Currently I have no access to a ntp server (a separate issue with over zealous county blocking, that is taking them months to fix)
Played around with w32tm, all domain machines were resyncing to domain. Domain had no w32tm host/ source listed to resync from.
Disabled w32tm on the domain server- this caused all the network machines other than 2008r2 to retain the correct time. Now though each of 2008r2 servers will be running at different times. Over night one server gained 7 hours another gained 2 days while the antivirus server lost a month. At first I thought this might be to do with only the virtualised machines but the lone physical server had the same issue.
Any ideas what is setting the time for the 2008r2 machines?
Can anyone suggest a tool to pinpoint whats setting the time seemingly randomly. I tried a tool called ntplookup but it could not identify any rogue ntp servers.
Am I missing something obvious?