G
Guest
Hi,
We have a domain controller that has a problem syncronizing to an external
time server. I tried almost all the solution posted in this forum and to
other forum in the Internet and still it does not work.
I also tried to use the command w32tm /unregister and w32tm /register to
reset all registry entries for w32time service but still it can't connect to
the time server.
I look at the firewall and the policy allows udp 123 to the time server and
their are no logs coming from my DC on udp port 123 going to the time server.
I used ethereal to captured the packet when I command w32tm /resync, but I
could not see any udp 123 request going to my time server.
On the DC, I command
C:\WINDOWS>w32tm /resync
Sending resync command to local computer...
The computer did not resync because no time data was available.
c:\w32tm /monitor
ICMMADB.DOMAIN.COM *** PDC ***
ICMP: 0ms delay.
NTP: error WSAECONNRESET - no server listening on NTP port
C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5
The following arguments were unexpected: /computer:icmtnzaw5
Exiting with error 0x80070057
To add up to my problem, there is no events log on Windows event viewer, the
last w32time log that I had was last sept 29, 2007 @ 4:10:49 PM.
Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM
The time service has not synchronized the system time for 86400 seconds
because none of the time service providers provided a usable time stamp. The
time service is no longer synchronized and cannot provide the time to other
clients or update the system clock. Monitor the system events displayed in
the Event Viewer to make sure that a more serious problem does not exist.
I activate the debug log of w32time, hope you can better analyze the problem.
w32tm.log
148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update
148579 01:42:45.2656250s - W32TmServiceMain: Param change notification
148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':
148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
148579 01:42:45.2656250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001
148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':
148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
148579 01:42:45.2656250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000
148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:42:45.2656250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:42:45.2656250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:42:45.2656250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:42:45.2656250s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:42:45.2656250s - No params changed for local clock.
148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s
148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update
148579 01:47:47.6406250s - W32TmServiceMain: Param change notification
148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':
148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
148579 01:47:47.6406250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001
148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':
148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
148579 01:47:47.6406250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000
148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:47:47.6406250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:47:47.6406250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:47:47.6406250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:47:47.6406250s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:47:47.6406250s - No params changed for local clock.
148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s
148579 01:51:33.6250000s - W32TmServiceMain: timeout
148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s
148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin
(S-1-5-21-2000478354-362288127-839522115-500)
148579 01:52:47.0156250s - RPC Call - HardResync
148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip
Notification **********
148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -
ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0 RDs:100000000
TSF:0x0
148579 01:52:47.0156250s - ClockDispln: we're a reliable time service with
no time source: LS: 0, TN: 864000000000, WAIT: 86400000
148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s (1024.000s)
148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update
148579 01:52:49.8750000s - W32TmServiceMain: Param change notification
148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':
148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
148579 01:52:49.8750000s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001
148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':
148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
148579 01:52:49.8750000s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000
148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:52:49.8750000s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:52:49.8750000s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:52:49.8750000s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:52:49.8750000s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:52:49.8750000s - No params changed for local clock.
148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s (1021.140s)
148579 01:53:03.0312500s - W32TmServiceMain: timeout
148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s
*********************************************************
Domain Controller W32time Registry entries
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,00,63,\
00,65,00,00,00
"DisplayName"="Windows Time"
"ObjectName"="NT AUTHORITY\\LocalService"
"Description"="Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start."
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:02faf080
"SpikeWatchPeriod"=dword:00000384
"HoldPeriod"=dword:00000005
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000007
"MinPollInterval"=dword:00000006
"MaxPollInterval"=dword:0000000a
"MaxNegPhaseCorrection"=dword:ffffffff
"MaxPosPhaseCorrection"=dword:ffffffff
"UpdateInterval"=dword:00000064
"AnnounceFlags"=dword:00000005
"MaxAllowedPhaseOffset"=dword:0000012c
"FileLogSize"=dword:00989680
"FileLogName"="c:\\windows\\temp\\w32tm.log"
"FileLogEntries"="0-116"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"Type"="NTP"
"NtpServer"="timeserver,0x1"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000001
"LargeSampleSkew"=dword:00000003
"DllName"="C:\\WINDOWS\\system32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):00,00
"SpecialPollInterval"=dword:00000e10
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpServer]
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\system32\\w32time.dll"
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
C:\WINDOWS>netstat -an (Time Server)
Active Connections
Proto Local Address Foreign Address State
*
*
UDP 0.0.0.0:161 *:*
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:1029 *:*
UDP 0.0.0.0:1051 *:*
UDP 0.0.0.0:1052 *:*
UDP 0.0.0.0:1065 *:*
UDP 0.0.0.0:1655 *:*
UDP 0.0.0.0:2967 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5632 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1027 *:*
UDP 127.0.0.1:1038 *:*
UDP 127.0.0.1:1050 *:*
UDP 127.0.0.1:1056 *:*
UDP 127.0.0.1:1070 *:*
UDP 127.0.0.1:1155 *:*
UDP 127.0.0.1:1158 *:*
UDP 127.0.0.1:2262 *:*
UDP 210.12.169.206:123 *:*
UDP 210.12.169.206:88 *:*
UDP 210.12.169.206:137 *:*
UDP 210.12.169.206:138 *:*
UDP 210.12.169.206:389 *:*
UDP 210.12.169.206:464 *:*
Thanks.
We have a domain controller that has a problem syncronizing to an external
time server. I tried almost all the solution posted in this forum and to
other forum in the Internet and still it does not work.
I also tried to use the command w32tm /unregister and w32tm /register to
reset all registry entries for w32time service but still it can't connect to
the time server.
I look at the firewall and the policy allows udp 123 to the time server and
their are no logs coming from my DC on udp port 123 going to the time server.
I used ethereal to captured the packet when I command w32tm /resync, but I
could not see any udp 123 request going to my time server.
On the DC, I command
C:\WINDOWS>w32tm /resync
Sending resync command to local computer...
The computer did not resync because no time data was available.
c:\w32tm /monitor
ICMMADB.DOMAIN.COM *** PDC ***
ICMP: 0ms delay.
NTP: error WSAECONNRESET - no server listening on NTP port
C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5
The following arguments were unexpected: /computer:icmtnzaw5
Exiting with error 0x80070057
To add up to my problem, there is no events log on Windows event viewer, the
last w32time log that I had was last sept 29, 2007 @ 4:10:49 PM.
Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM
The time service has not synchronized the system time for 86400 seconds
because none of the time service providers provided a usable time stamp. The
time service is no longer synchronized and cannot provide the time to other
clients or update the system clock. Monitor the system events displayed in
the Event Viewer to make sure that a more serious problem does not exist.
I activate the debug log of w32time, hope you can better analyze the problem.
w32tm.log
148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update
148579 01:42:45.2656250s - W32TmServiceMain: Param change notification
148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':
148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
148579 01:42:45.2656250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001
148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':
148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
148579 01:42:45.2656250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000
148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:42:45.2656250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:42:45.2656250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:42:45.2656250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:42:45.2656250s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:42:45.2656250s - No params changed for local clock.
148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s
148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update
148579 01:47:47.6406250s - W32TmServiceMain: Param change notification
148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':
148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
148579 01:47:47.6406250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001
148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':
148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
148579 01:47:47.6406250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000
148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:47:47.6406250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:47:47.6406250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:47:47.6406250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:47:47.6406250s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:47:47.6406250s - No params changed for local clock.
148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s
148579 01:51:33.6250000s - W32TmServiceMain: timeout
148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s
148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin
(S-1-5-21-2000478354-362288127-839522115-500)
148579 01:52:47.0156250s - RPC Call - HardResync
148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip
Notification **********
148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -
ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0 RDs:100000000
TSF:0x0
148579 01:52:47.0156250s - ClockDispln: we're a reliable time service with
no time source: LS: 0, TN: 864000000000, WAIT: 86400000
148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s (1024.000s)
148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update
148579 01:52:49.8750000s - W32TmServiceMain: Param change notification
148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':
148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
148579 01:52:49.8750000s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001
148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':
148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
148579 01:52:49.8750000s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000
148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:52:49.8750000s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:52:49.8750000s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:52:49.8750000s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:52:49.8750000s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:52:49.8750000s - No params changed for local clock.
148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s (1021.140s)
148579 01:53:03.0312500s - W32TmServiceMain: timeout
148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s
*********************************************************
Domain Controller W32time Registry entries
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,00,63,\
00,65,00,00,00
"DisplayName"="Windows Time"
"ObjectName"="NT AUTHORITY\\LocalService"
"Description"="Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start."
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:02faf080
"SpikeWatchPeriod"=dword:00000384
"HoldPeriod"=dword:00000005
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000007
"MinPollInterval"=dword:00000006
"MaxPollInterval"=dword:0000000a
"MaxNegPhaseCorrection"=dword:ffffffff
"MaxPosPhaseCorrection"=dword:ffffffff
"UpdateInterval"=dword:00000064
"AnnounceFlags"=dword:00000005
"MaxAllowedPhaseOffset"=dword:0000012c
"FileLogSize"=dword:00989680
"FileLogName"="c:\\windows\\temp\\w32tm.log"
"FileLogEntries"="0-116"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"Type"="NTP"
"NtpServer"="timeserver,0x1"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000001
"LargeSampleSkew"=dword:00000003
"DllName"="C:\\WINDOWS\\system32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):00,00
"SpecialPollInterval"=dword:00000e10
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpServer]
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\system32\\w32time.dll"
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
C:\WINDOWS>netstat -an (Time Server)
Active Connections
Proto Local Address Foreign Address State
*
*
UDP 0.0.0.0:161 *:*
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:1029 *:*
UDP 0.0.0.0:1051 *:*
UDP 0.0.0.0:1052 *:*
UDP 0.0.0.0:1065 *:*
UDP 0.0.0.0:1655 *:*
UDP 0.0.0.0:2967 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5632 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1027 *:*
UDP 127.0.0.1:1038 *:*
UDP 127.0.0.1:1050 *:*
UDP 127.0.0.1:1056 *:*
UDP 127.0.0.1:1070 *:*
UDP 127.0.0.1:1155 *:*
UDP 127.0.0.1:1158 *:*
UDP 127.0.0.1:2262 *:*
UDP 210.12.169.206:123 *:*
UDP 210.12.169.206:88 *:*
UDP 210.12.169.206:137 *:*
UDP 210.12.169.206:138 *:*
UDP 210.12.169.206:389 *:*
UDP 210.12.169.206:464 *:*
Thanks.