System time on Domain Controllers and Domain Clients is out of sync
Problem Statement:
Cause:
Registry entries for W32time service were not configured properly.
Resolution
Recommended registry settings for W32Time Service:
o On PDC,
• HKLM\System\CurrentControlSet\Services\W32time\Config – AnnounceFlag = 5 • HKLM\System\CurrentControlSet\Services\W32time\Config – MaxPollInterval = 10 (2^10 = 1024s) • HKLM\System\CurrentControlSet\Services\W32time\Config – MinPollInterval = 6 • HKLM\System\CurrentControlSet\Services\W32time\Parameters – Type = NTP • HKLM\System\CurrentControlSet\Services\W32time\Parameters – NTPServer = <external time source>,0x9 • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPClient – SpecialPollInterval = 900s • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPClient – Enabled = 1 • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPServer – Enabled = 1
o On other DCs,
• HKLM\System\CurrentControlSet\Services\W32time\Config – AnnounceFlag = 10 - decimal • HKLM\System\CurrentControlSet\Services\W32time\Config – MaxPollInterval = 10 (by default, it is set to 15. 10 will guarantee a quicker polling interval) • HKLM\System\CurrentControlSet\Services\W32time\Config – MinPollInterval = 6 (by default, set to 10) • HKLM\System\CurrentControlSet\Services\W32time\Parameters – Type = NT5DS • HKLM\System\CurrentControlSet\Services\W32time\Parameters – NTPServer = time.windows.com,0x9 • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPClient – Enabled = 1 • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPServer – Enabled = 1
o On member servers and clients,
• HKLM\System\CurrentControlSet\Services\W32time\Config – AnnounceFlag = 10 • HKLM\System\CurrentControlSet\Services\W32time\Config – MaxPollInterval = 10 (by default, it is set to 15. 10 will guarantee a quicker polling interval) • HKLM\System\CurrentControlSet\Services\W32time\Config – MinPollInterval = 6 (by default, set to 10) • HKLM\System\CurrentControlSet\Services\W32time\Parameters – Type = NT5DS • HKLM\System\CurrentControlSet\Services\W32time\Parameters – NTPServer = time.windows.com,0x9 • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPClient – Enabled = 1 • HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\NTPServer – Enabled = 0
Note:
– If you make a change to registry it requires restart of W32time service to take effect.
– Use w32tm /query /source – to identify the time source
– Use w32tm /resync /rediscover – to resync and rediscover the time source
– Use w32tm /stripchart /computer:<time_source> /samples:5 /dataonly – to see the offset time with time source.
– If you see VM IC Time Synchronization Provider as time source – disable NTP client at VM level and configure HKLM\System\CurrentControlSet\Services\W32time\TimeProvider\VMICTimeProvider – Enabled = 0