Different configurations for w32time in XP Pro? I need help

Y

Yair

I have been looking for an answer about this issue for months but I haven't
been able to find anyone who really understands w32time well enough, all the
documentation in Microsoft's site and others didn't help me figure it put on
my one.

I am running windows xp pro and in Date and Time Properties->Internet Time
The time has been successfully synchronized with time.inter.net.il on
06/05/05 at 18:26
it also say
Next synchronization: 13/05/05 at 18:26

so far so good
that's a 7 days period between checks and that's fine with me
but how does the 7 days period add up with the errors in my event log

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 11/05/05
Time: 0:26:15
User: N/A
Computer: ADPC
Description:
The time service has not been able to synchronize the system time for 49152
seconds because none of the time providers has been able to provide a usable
time stamp. The system clock is unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

in 11/5 8/5 7/5 5/5
almost everyday! and that's not a 7 days period

how can that be? what controls the more frequent checks? and how come the
checks in Date and Time Properties->Internet Time seems to go well but the
other ones report errors in the event log?


these are my registry settings:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time]


"DisplayName"="Windows Time"
"ErrorControl"=dword:00000001
"Group"=""
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Objectname"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,64,00,20,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:00138800
"SpikeWatchPeriod"=dword:0000005a
"HoldPeriod"=dword:00000005
"MaxPollInterval"=dword:0000000f
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000001
"MinPollInterval"=dword:0000000a
"UpdateInterval"=dword:00057e40
"MaxNegPhaseCorrection"=dword:0000d2f0
"MaxPosPhaseCorrection"=dword:0000d2f0
"AnnounceFlags"=dword:00000010
"MaxAllowedPhaseOffset"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\
00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"NtpServer"="time.inter.net.il,0x1"
"Type"="NTP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\
02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\
18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):74,00,69,00,6d,00,65,00,2e,00,69,00,6e,00,74,\
00,65,00,72,00,2e,00,6e,00,65,00,74,00,2e,00,69,00,6c,00,2c,00,37,00,39,00,\
62,00,30,00,30,00,34,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"SpecialPollInterval"=dword:00093a80

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer]
"Enabled"=dword:00000000
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001


I appreciate any help, I am completely lost and I tried anything I can to
figure this out with no luck :(

Sincerely,
Yair
 
K

Kim Frank

Install the latest service pack and you shouldn't have the problem. It
happens when you resume a computer from standby.

For more information see:

http://support.microsoft.com/?kbid=832936


--
Kim

This posting is provided "AS IS" with no warranties, and confers no rights.


Yair said:
I have been looking for an answer about this issue for months but I haven't
been able to find anyone who really understands w32time well enough, all
the documentation in Microsoft's site and others didn't help me figure it
put on my one.

I am running windows xp pro and in Date and Time Properties->Internet Time
The time has been successfully synchronized with time.inter.net.il on
06/05/05 at 18:26
it also say
Next synchronization: 13/05/05 at 18:26

so far so good
that's a 7 days period between checks and that's fine with me
but how does the 7 days period add up with the errors in my event log

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 11/05/05
Time: 0:26:15
User: N/A
Computer: ADPC
Description:
The time service has not been able to synchronize the system time for
49152 seconds because none of the time providers has been able to provide
a usable time stamp. The system clock is unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

in 11/5 8/5 7/5 5/5
almost everyday! and that's not a 7 days period

how can that be? what controls the more frequent checks? and how come the
checks in Date and Time Properties->Internet Time seems to go well but the
other ones report errors in the event log?


these are my registry settings:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time]


"DisplayName"="Windows Time"
"ErrorControl"=dword:00000001
"Group"=""
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Objectname"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,64,00,20,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:00138800
"SpikeWatchPeriod"=dword:0000005a
"HoldPeriod"=dword:00000005
"MaxPollInterval"=dword:0000000f
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000001
"MinPollInterval"=dword:0000000a
"UpdateInterval"=dword:00057e40
"MaxNegPhaseCorrection"=dword:0000d2f0
"MaxPosPhaseCorrection"=dword:0000d2f0
"AnnounceFlags"=dword:00000010
"MaxAllowedPhaseOffset"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\

00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"NtpServer"="time.inter.net.il,0x1"
"Type"="NTP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\

05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\

02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\

18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):74,00,69,00,6d,00,65,00,2e,00,69,00,6e,00,74,\

00,65,00,72,00,2e,00,6e,00,65,00,74,00,2e,00,69,00,6c,00,2c,00,37,00,39,00,\

62,00,30,00,30,00,34,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"SpecialPollInterval"=dword:00093a80

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer]
"Enabled"=dword:00000000
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001


I appreciate any help, I am completely lost and I tried anything I can to
figure this out with no luck :(

Sincerely,
Yair
Click to expand...
 
Y

Yair

i have he latest service pack and i don't even use standby

about 49152 seconds after the date in which a successful synchronization
occurred in"Date and Time Properties->Internet Time"
that warning about not being able to synchronize the system time for 49152
seconds is added to the event log

which leads me to the conclusion that either when Date and Time
Properties->Internet Time claim "The time has been successfully
synchronized", it means nothing!
(why on earth would anybody program such a useless status report?)
or the event log error means nothing!

i assume that the repetitive errors in the event log are timely retries in
case of an error.

i know for a fact that windows does synchronize my clock from time to time
(because when i forgot to enable Daylight Saving Time and only changed the
clock windows changed it back automatically and i also did some other
tests), and i tried quite a few servers including the one in my own ISP, so
this is not server load related.

i think there is a bug which makes w32time in windows xp think it failed
although it didn't.
this assumption makes more sense then the one i have just read in an old
microsoft.public.windowsxp.general thread which dealt with the fact manual
synchronizations works usually but automatic ones usually does not.
http://forum.iamnotageek.com/t-422332.html

i think both manual and automatic synchronizations work but windows doesn't
know about it


Kim Frank said:
Install the latest service pack and you shouldn't have the problem. It
happens when you resume a computer from standby.

For more information see:

http://support.microsoft.com/?kbid=832936


--
Kim

This posting is provided "AS IS" with no warranties, and confers no
rights.


Yair said:
I have been looking for an answer about this issue for months but I
haven't been able to find anyone who really understands w32time well
enough, all the documentation in Microsoft's site and others didn't help
me figure it put on my one.

I am running windows xp pro and in Date and Time Properties->Internet
Time
The time has been successfully synchronized with time.inter.net.il on
06/05/05 at 18:26
it also say
Next synchronization: 13/05/05 at 18:26

so far so good
that's a 7 days period between checks and that's fine with me
but how does the 7 days period add up with the errors in my event log

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 11/05/05
Time: 0:26:15
User: N/A
Computer: ADPC
Description:
The time service has not been able to synchronize the system time for
49152 seconds because none of the time providers has been able to provide
a usable time stamp. The system clock is unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

in 11/5 8/5 7/5 5/5
almost everyday! and that's not a 7 days period

how can that be? what controls the more frequent checks? and how come the
checks in Date and Time Properties->Internet Time seems to go well but
the other ones report errors in the event log?


these are my registry settings:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time]


"DisplayName"="Windows Time"
"ErrorControl"=dword:00000001
"Group"=""
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Objectname"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,64,00,20,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:00138800
"SpikeWatchPeriod"=dword:0000005a
"HoldPeriod"=dword:00000005
"MaxPollInterval"=dword:0000000f
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000001
"MinPollInterval"=dword:0000000a
"UpdateInterval"=dword:00057e40
"MaxNegPhaseCorrection"=dword:0000d2f0
"MaxPosPhaseCorrection"=dword:0000d2f0
"AnnounceFlags"=dword:00000010
"MaxAllowedPhaseOffset"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\

00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"NtpServer"="time.inter.net.il,0x1"
"Type"="NTP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\

05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\

02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\

18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):74,00,69,00,6d,00,65,00,2e,00,69,00,6e,00,74,\

00,65,00,72,00,2e,00,6e,00,65,00,74,00,2e,00,69,00,6c,00,2c,00,37,00,39,00,\

62,00,30,00,30,00,34,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"SpecialPollInterval"=dword:00093a80

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer]
"Enabled"=dword:00000000
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001


I appreciate any help, I am completely lost and I tried anything I can to
figure this out with no luck :(

Sincerely,
Yair
Click to expand...
Click to expand...
 
Y

Yair

i just tried the method mentioned here
http://www.meinberg.de/english/faq/faq_28.htm
which means changing the value of NtpServer from 0x1 to 0x8
after doing that windows started synchronizing the time every 17 minutes
instead of every week!

i looked around and found out that when that value is set to 0x1 it is using
the SpecialPollInterval entry value "Instead of following the NTP
specification".
so when 0x8 is set it is following the NTP specification hm......
another site called it
"a poll interval determine by the operating system" hm.....


no wonder this thing is so complicated, it is so badly documented!

does anybody know HOW the operating system determines that poll
interval....or what is that NTP specification???



Thanks, as you can see the randomness of this thing is driving me crazy
 
S

Star Fleet Admiral Q

My interpretation is windows uses one of each of the following keys,
whichever applies:
-normal successful
update -HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\UpdateInterval

-when last update failed or you wish to have it update different than key
above -
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval

It seems it will always enter the event to be xxxx Seconds from last attempt
of update based on the number of seconds found in the UpdateInterval key.
If it fails, it still enters the event per normal, but states the update
failed, but the next update will be xxxx Seconds from this attempt found in
the SpecialPolling Interval key.
--

Star Fleet Admiral Q @ your Service!

http://www.google.com
Google is your "Friend"

Yair said:
I have been looking for an answer about this issue for months but I haven't
been able to find anyone who really understands w32time well enough, all
the documentation in Microsoft's site and others didn't help me figure it
put on my one.

I am running windows xp pro and in Date and Time Properties->Internet Time
The time has been successfully synchronized with time.inter.net.il on
06/05/05 at 18:26
it also say
Next synchronization: 13/05/05 at 18:26

so far so good
that's a 7 days period between checks and that's fine with me
but how does the 7 days period add up with the errors in my event log

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 11/05/05
Time: 0:26:15
User: N/A
Computer: ADPC
Description:
The time service has not been able to synchronize the system time for
49152 seconds because none of the time providers has been able to provide
a usable time stamp. The system clock is unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

in 11/5 8/5 7/5 5/5
almost everyday! and that's not a 7 days period

how can that be? what controls the more frequent checks? and how come the
checks in Date and Time Properties->Internet Time seems to go well but the
other ones report errors in the event log?


these are my registry settings:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time]


"DisplayName"="Windows Time"
"ErrorControl"=dword:00000001
"Group"=""
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Objectname"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,64,00,20,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:00138800
"SpikeWatchPeriod"=dword:0000005a
"HoldPeriod"=dword:00000005
"MaxPollInterval"=dword:0000000f
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000001
"MinPollInterval"=dword:0000000a
"UpdateInterval"=dword:00057e40
"MaxNegPhaseCorrection"=dword:0000d2f0
"MaxPosPhaseCorrection"=dword:0000d2f0
"AnnounceFlags"=dword:00000010
"MaxAllowedPhaseOffset"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\

00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"NtpServer"="time.inter.net.il,0x1"
"Type"="NTP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\

05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\

02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\

18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):74,00,69,00,6d,00,65,00,2e,00,69,00,6e,00,74,\

00,65,00,72,00,2e,00,6e,00,65,00,74,00,2e,00,69,00,6c,00,2c,00,37,00,39,00,\

62,00,30,00,30,00,34,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"SpecialPollInterval"=dword:00093a80

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer]
"Enabled"=dword:00000000
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001


I appreciate any help, I am completely lost and I tried anything I can to
figure this out with no luck :(

Sincerely,
Yair
Click to expand...
 
Y

Yair

when the NtpServer value is set to 0x1
it is using the SpecialPollInterval key as you wrote
but when it is set to 0x8, as apparently it is supposed to be (according to
http://www.meinberg.de/english/faq/faq_28.htm )
it is not using SpecialPollInterval or UpdateInterval because I have
UpdateInterval set to 360000 and SpecialPollInterval to 604800
that's clearly not the 17 minutes it started using when I switched from 0x1
to 0x8


I would like to use 0x8 to see if it solves my eventid 36 problem
but I don't want to hammer the ntp server while doing so, 17 minutes is too
much.

even more intersting than the source of the 17 minutes interval, why does it
claim "The time has been successfully synchronized" and 49152 seconds later
add a warning (eventid 36) to the event log?


Star Fleet Admiral Q said:
My interpretation is windows uses one of each of the following keys,
whichever applies:
-normal successful
update -HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\UpdateInterval

-when last update failed or you wish to have it update different than key
above -
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient\SpecialPollInterval

It seems it will always enter the event to be xxxx Seconds from last
attempt of update based on the number of seconds found in the
UpdateInterval key. If it fails, it still enters the event per normal, but
states the update failed, but the next update will be xxxx Seconds from
this attempt found in the SpecialPolling Interval key.
--

Star Fleet Admiral Q @ your Service!

http://www.google.com
Google is your "Friend"

Yair said:
I have been looking for an answer about this issue for months but I
haven't been able to find anyone who really understands w32time well
enough, all the documentation in Microsoft's site and others didn't help
me figure it put on my one.

I am running windows xp pro and in Date and Time Properties->Internet
Time
The time has been successfully synchronized with time.inter.net.il on
06/05/05 at 18:26
it also say
Next synchronization: 13/05/05 at 18:26

so far so good
that's a 7 days period between checks and that's fine with me
but how does the 7 days period add up with the errors in my event log

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 36
Date: 11/05/05
Time: 0:26:15
User: N/A
Computer: ADPC
Description:
The time service has not been able to synchronize the system time for
49152 seconds because none of the time providers has been able to provide
a usable time stamp. The system clock is unsynchronized.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

in 11/5 8/5 7/5 5/5
almost everyday! and that's not a 7 days period

how can that be? what controls the more frequent checks? and how come the
checks in Date and Time Properties->Internet Time seems to go well but
the other ones report errors in the event log?


these are my registry settings:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time]


"DisplayName"="Windows Time"
"ErrorControl"=dword:00000001
"Group"=""
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Objectname"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020
"FailureActions"=hex:05,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,64,00,20,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:00138800
"SpikeWatchPeriod"=dword:0000005a
"HoldPeriod"=dword:00000005
"MaxPollInterval"=dword:0000000f
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000001
"MinPollInterval"=dword:0000000a
"UpdateInterval"=dword:00057e40
"MaxNegPhaseCorrection"=dword:0000d2f0
"MaxPosPhaseCorrection"=dword:0000d2f0
"AnnounceFlags"=dword:00000010
"MaxAllowedPhaseOffset"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\

00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"NtpServer"="time.inter.net.il,0x1"
"Type"="NTP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\

05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\

02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\

18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):74,00,69,00,6d,00,65,00,2e,00,69,00,6e,00,74,\

00,65,00,72,00,2e,00,6e,00,65,00,74,00,2e,00,69,00,6c,00,2c,00,37,00,39,00,\

62,00,30,00,30,00,34,00,63,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00
"SpecialPollInterval"=dword:00093a80

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer]
"Enabled"=dword:00000000
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\System32\\w32time.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001


I appreciate any help, I am completely lost and I tried anything I can to
figure this out with no luck :(

Sincerely,
Yair
Click to expand...
Click to expand...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Reg export file question 2
Why is my Windows time constantly slow by 27 seconds? 2
Domain Controller Unable to connect to the Time Server 0
Virus 'W32.Spybot.Worm' identified in file 'wlmsngr.exe' 3
The NTP server didn't respond 14
Missing XP SP2's Wireless Zero Configuration (WZC) 3
Sys Restore keeps restore upon boot 2
Missing XP SP2's Wireless Zero Configuration (WZC) 3

Top