My Time-Zone resets itself...?

[Kenneth]

Howdy,

I run XP Pro V 2002, SP2.

Recently, the system started changing its time-zone on its
own.

Specifically:

I am east coast US and set the Zone accordingly to GMT -5.

The system holds that way as it should, but only for a
while.

After a day or so, I glance at the system time to see that
it reflects the zone setting to Brisbane - GMT +10.

With apology, I cannot be more specific about how much time
elapses before this re-setting occurs.

I've gone through this cycle perhaps 10 times and will add
that the system always reverts to the same GMT +10.

What might cause this, and what can I do to have my
time-zone setting "hold"?

Thanks for any help on this,

 

[PA Bear]

Is the machine fully patched at Windows Update?

 

[Kenneth]

Is the machine fully patched at Windows Update?

Hello again,

Yes, it is...

Thanks for any further thoughts,

 

[HeyBub]

Howdy,

I run XP Pro V 2002, SP2.

Recently, the system started changing its time-zone on its
own.

Specifically:

I am east coast US and set the Zone accordingly to GMT -5.

The system holds that way as it should, but only for a
while.

Dunno. Two things come to mind.

1. You may have some malware that is misbehaving, even for malware.
2. If all else fails, you could sell your system to an Aussie.

 

[Wesley Vogel]

2. If all else fails, you could sell your system to an Aussie.



--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Kenneth]

Dunno. Two things come to mind.

1. You may have some malware that is misbehaving, even for malware.
2. If all else fails, you could sell your system to an Aussie.

Hello again,

#1 - I regularly check with a suite of stuff that should
check...

#2 - Maybe I bought the box from an Aussie...<g>

All the best,

 

[Kenneth]

Maybe you are synchronized with an Internet time server.

"-If your computer is a member of a domain, your computer clock is
probably synchronized automatically by a network time server If your
computer is not a member of a domain, your computer's clock is
automatically and regularly synchronized by an Internet time server.
This procedure provides information on switching to a different
Internet time server.-"

'Microsoft Corporation' (http://tinyurl.com/ydfa76)

The system is not part of a domain, (it is part of a
workgroup in which all other systems reset time properly.)

Thanks for any further thoughts,

 

[Wesley Vogel]

SYMPTOMS
Changes that you make to the time zone on the Time Zone tab do not take
effect.
CAUSE
By default, only administrators and power users can change the date, time,
or time zone

See the RESOLUTION here...
You Cannot Set the Date, Time, or Time Zone on Your Computer
http://support.microsoft.com/default.aspx?scid=kb;en-us;300022

To restore the Windows Time Service if it has been broken. Open a command
prompt...
Start | Run | Type: cmd | Click OK |

Type: net stop W32Time hit your Enter key.

Type: w32tm /unregister hit your Enter key.

Type: w32tm /register hit your Enter key.

Type: net start W32Time hit your Enter key.

Type: sc query W32Time hit your Enter key.

It will look something like this...

------------------
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\>net stop W32Time
The Windows Time service is not started.

More help is available by typing NET HELPMSG 3521.

C:\>NET HELPMSG 3521

The *** service is not started.

C:\>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\>w32tm /register
W32Time successfully registered.

C:\>net start W32Time
The Windows Time service is starting.
The Windows Time service was started successfully.

C:\>sc query W32Time

SERVICE_NAME: W32Time
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\>
------------------

If you still are having problems. Maybe run the unregister command, reboot,
run the register command and reboot.

Type in a command prompt:

w32tm /unregister

Hit Enter. Close whatever you need to close and reboot.

Type in a command prompt:

w32tm /register

Hit Enter. See if Windows Time is in Services, if not reboot and look
again.

Explanation.

w32tm /register
Register to run as a service and add default configuration to the registry.

w32tm /unregister
Unregister service and remove all configuration information from the
registry.

For help, type: w32tm /?

Also, paste the following line into Start | Run and click OK...

hh ntcmds.chm::/time_w32tm.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Kenneth]

SYMPTOMS
Changes that you make to the time zone on the Time Zone tab do not take
effect.
CAUSE
By default, only administrators and power users can change the date, time,
or time zone

Hello again,

I thank you for the suggestions (and have actually done the
entire register/unregister/re-register drill already to no
avail) but...

The problem described is not (precisely) the one that I
have.

It would not be correct to say that I cannot change the
system's time zone. I can. But after a while (many hours, or
a few days) the system reverts to the Brisbane setting.

I certainly will try the repair steps again, but would
welcome any further thoughts you might have,

 

[Wesley Vogel]

Kenneth,

I thought that it was worth a shot.

Here's some info.

<quote>
Eastern Standard Time
(GMT-05:00) Eastern Time (US and Canada)
Eastern Daylight Time
Eastern Standard Time
Second Sunday in March at 02:00:00
First Sunday in November at 02:00:00
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Time Zones\Eastern Standard Time
TZI=hex:2c,01,00,00,00,00,00,00,
c4,ff,ff,ff,00,00,0b,00,00,00,01,00,02,
00,00,00,00,00,00,00,00,00,03,00,00,
00,02,00,02,00,00,00,00,00,00,00
<quote>
from...
2007 time zone update for Microsoft Windows operating systems
http://support.microsoft.com/kb/928388

From what's in my registry...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time
Zones\Eastern Standard Time]
"Display"="(GMT-05:00) Eastern Time (US & Canada)"
"Dlt"="Eastern Daylight Time"
"Std"="Eastern Standard Time"
"MapID"="38,39"
"Index"=dword:00000023
"TZI"=hex:2c,01,00,00,00,00,00,00,c4,ff,ff,ff,00,00,0a,00,00,00,05,00,02,00,
00,\
00,00,00,00,00,00,00,04,00,00,00,01,00,02,00,00,00,00,00,00,00

See this...
JSI Tip 0398 - How to set the time zone by editing the registry
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=0398

From Bill James
<quote>
What isn't explained there is that you have to reverse the comma delimited
value of each individual piece value. Looking at Central Standard Time for
example, if you look at the values 13,14 you will see that year is still set
to 00,00 in the new values, which means that year is disregarded in the time
change calculation. Position 15,16 (Standard start month) has changed from
0a,00 to 0b,00 which means the start month is 11 instead of 10.
<quote>

How to turn on debug logging in the Windows Time Service
http://support.microsoft.com/kb/816043

Windows Time Service Tools and Settings
http://technet2.microsoft.com/WindowsServer/en/Library/b43a025f-cce2-4c82-b3ea-3b95d482db3a1033.mspx

<quote>
When the computers are part of a workgroup, you must manually configure the
time synchronization settings. You might identify a computer as a locally
reliable time source by configuring the Windows Time service on that
computer to use a known accurate time source, either by using special
hardware or by using a time source that is available on the Internet. You
can configure all other workgroup computers manually to synchronize their
time with this local time source.
<quote>
How to synchronize the time with the Windows Time service in Windows XP
http://support.microsoft.com/kb/307897

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[jfgoulet]

We have the exact problem since the beginning of 2007 on at least 15
computers out of 900.

The problem may come back even when fixed manually.
On the same computer we saw Brisbane and Brussels even though we had
reset it to "Eastern Time" in between.
The time zone may not always be changed to a specific one but mostly
the two above.

All desktop are in Windows XP SP2 fully patched including KB928388.
That patch was applied as it was released in november.
The Australian patch KB909915 was NOT applied.

Nothing we can relate to a similar type of work/applications.

So let's get real here and try to find a solution

 

[Elmo]

We have the exact problem since the beginning of 2007 on at least 15
computers out of 900.

The problem may come back even when fixed manually.
On the same computer we saw Brisbane and Brussels even though we had
reset it to "Eastern Time" in between.
The time zone may not always be changed to a specific one but mostly
the two above.

All desktop are in Windows XP SP2 fully patched including KB928388.
That patch was applied as it was released in November.
The Australian patch KB909915 was NOT applied.

Nothing we can relate to a similar type of work/applications.

So let's get real here and try to find a solution

Just a thought or two.. maybe booting to Safe Mode, the time zone
change would be remembered. Maybe turning off Internet Time, at least
till the time zone is permanently corrected. I found these references
to EST in the registry, and thought you could import them from a working
machine. I didn't include the values and data, just the keys:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\TimeZoneInformation]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\TimeZoneInformation]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation]

 

[Kenneth]

Kenneth,

I thought that it was worth a shot.

Here's some info.

Hi Wes,

No help yet, but...

I decided to turn off the Internet Time Synchronization for
a few days to see if that might solve the problem.

If so, it would be no great hardship to do without it.

If not, I'll be back.

Sincere thanks for your help,

 

[Wesley Vogel]

Let us know.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Kenneth]

Let us know.

Hi again Wes,

Well, it only took a few hours for me to see that no, it did
not work.

I set the box to Eastern U.S. as it should be, un-checked
Internet synchronization, and left my desk.

When I next looked, the system had taken its now familiar
trip to Brisbane...

Thanks for any further thoughts,

 

[Kenneth]

Hi again Wes,

Well, it only took a few hours for me to see that no, it did
not work.

I set the box to Eastern U.S. as it should be, un-checked
Internet synchronization, and left my desk.

When I next looked, the system had taken its now familiar
trip to Brisbane...

Thanks for any further thoughts,

Hi Wes,

Last evening, I tried something else...

I booted into Safe Mode, and launched the time function.

There I saw that the system displayed the time incorrectly,
that is, it displayed the correct time for Brisbane even
though I am in Eastern US.

But at that point, it got more interesting.

When I saw that the system was set to Brisbane time, I was
sure that I would see that it was also set to the Brisbane
Time Zone.

To my surprise, it was, in fact, set to Eastern Time US.

So, I then reset the time.

With that, I thought that I had stumbled on a solution to
the problem.

Alas, that was not to be.

Moments ago, I glanced over to that system to see that yet
again, it had reset itself to Brisbane.

Whew...

Any further thoughts?

Sincere thanks,

 

[Wesley Vogel]

Hi Kenneth,

Cheech & Chong:
"How about you, hippie, wanna buy a watch?"

"I'm not into time, man." ;-)

I am rereading this entire thread.

These thoughts are in no particular order, just as I thought of them.

Disable the Windows Time service.

Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click Windows Time |
Set the startup type to Disabled | Click Apply |
Click the Stop button | When the service stops, click OK |
Close Services

I have no idea what will happen, leave it disabled for a while and see. I
usually leave mine disabled and only enable and start it when I think about
manually synchronizing the time on my machine.

You stated:
"The system is not part of a domain, (it is part of a
workgroup in which all other systems reset time properly.)"

So, I assume that time synchronization should be with an Internet Time
Server (time.nist.gov or time.windows.com, etc.) not by a network time
server.

Look in the Event Viewer, under System for any W32Time entries. Warnings,
etc. There may be a clue. <shrug>

Start | Run | Type: eventvwr | Click OK |
Click on System on the left and look for W32Time on the right under the
Source header.
You can click on the Source header to sort alphabetically, click twice to
get W up at the top to make it easier to look for W32Time. It sorts by
Date/Time by default.

Check registry entries shown here and other info...
How to configure an authoritative time server in Windows XP
http://support.microsoft.com/kb/314054

Check the Permissions on these registry keys. Administrator should have
Full Control...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Time Zones
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\TimeZoneInformation

In the off chance that w32time.dll (Windows Time Service) is messed up, run
sfc.exe.

System File Checker (sfc.exe) replaces screwed up system files.

Load your XP CD in your CD drive.

Start | Run | Type or paste: sfc /scannow | Click OK

sfc /scannow scans all protected system files immediately and replaces
incorrect versions with correct Microsoft versions.

System File Checker takes a while to run.

If SFC.EXE did anything it will be listed in the Event Viewer.

Open the Event Viewer...
Start | Run | Type: eventvwr | Click OK | Click System |

Windows File Protection will be listed under the Source column. Look at any
Windows File Protection entries.

Additional info...
Registry entries for the W32Time service
http://support.microsoft.com/kb/223184

Basic Operation of the Windows Time Service
http://support.microsoft.com/kb/224799

Win32 Time Service Informational, Warning, and Error Messages
http://support.microsoft.com/kb/232209

How to synchronize the time with the Windows Time service in Windows XP
http://support.microsoft.com/kb/307897

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Kenneth]

On Fri, 12 Jan 2007 10:21:51 -0700, "Wesley Vogel"

Hi Wes,

Please see my comments inline below...

Hi Kenneth,

Cheech & Chong:
"How about you, hippie, wanna buy a watch?"

"I'm not into time, man." ;-)

I am rereading this entire thread.

These thoughts are in no particular order, just as I thought of them.

Disable the Windows Time service.

Open Services...
Start | Run | Type: services.msc | Click OK |
Scroll down to and double click Windows Time |
Set the startup type to Disabled | Click Apply |
Click the Stop button | When the service stops, click OK |
Close Services

I have no idea what will happen, leave it disabled for a while and see. I
usually leave mine disabled and only enable and start it when I think about
manually synchronizing the time on my machine.

This seemed odd to me:

My system time was set to Eastern US as it should be and I
Disabled the service, and stopped it.

A few hours later, I noticed that the time was set to
Brisbane.

I reset to Eastern US, but then looked at the service.

To my surprise, it was set to Automatic, and was still
OFF...

You stated:
"The system is not part of a domain, (it is part of a
workgroup in which all other systems reset time properly.)"

So, I assume that time synchronization should be with an Internet Time
Server (time.nist.gov or time.windows.com, etc.) not by a network time
server.

Yes, Internet Time synch...

Look in the Event Viewer, under System for any W32Time entries. Warnings,
etc. There may be a clue. <shrug>

Start | Run | Type: eventvwr | Click OK |
Click on System on the left and look for W32Time on the right under the
Source header.
You can click on the Source header to sort alphabetically, click twice to
get W up at the top to make it easier to look for W32Time. It sorts by
Date/Time by default.

Nothing in event viewer relating to W32time...

Check registry entries shown here and other info...
How to configure an authoritative time server in Windows XP
http://support.microsoft.com/kb/314054

Check the Permissions on these registry keys. Administrator should have
Full Control...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Time Zones
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\TimeZoneInformation

All these keys have the proper permissions...

In the off chance that w32time.dll (Windows Time Service) is messed up, run
sfc.exe.

System File Checker (sfc.exe) replaces screwed up system files.

Load your XP CD in your CD drive.

Start | Run | Type or paste: sfc /scannow | Click OK

sfc /scannow scans all protected system files immediately and replaces
incorrect versions with correct Microsoft versions.

System File Checker takes a while to run.

If SFC.EXE did anything it will be listed in the Event Viewer.

Open the Event Viewer...
Start | Run | Type: eventvwr | Click OK | Click System |

Windows File Protection will be listed under the Source column. Look at any
Windows File Protection entries.

Will running SFC cause the system to revert to the version
of XP that is on my CD? That is, will it "erase" my many
updates?

Additional info...
Registry entries for the W32Time service
http://support.microsoft.com/kb/223184

Basic Operation of the Windows Time Service
http://support.microsoft.com/kb/224799

Win32 Time Service Informational, Warning, and Error Messages
http://support.microsoft.com/kb/232209

How to synchronize the time with the Windows Time service in Windows XP
http://support.microsoft.com/kb/307897

Very sincere thanks, as before,

 

[Wesley Vogel]

???? You may also need Task Scheduler running. ????
Check to see if Task Scheduler is set to Automatic in services.msc.

Will running SFC cause the system to revert to the version
of XP that is on my CD? That is, will it "erase" my many
updates?

No.

ServicePackFiles\i386 or system32\dllcache will be used for replacement
files.

%windir%\ServicePackFiles\i386 contains the most recently updated service
pack files.

%windir%\ServicePackFiles\i386 is used instead of %windir%\system32\dllcache
for Windows File Protection.

%windir%\ServicePackFiles\i386 folder exists if the following conditions are
true:
* You installed Windows XP SP2 from a Windows XP SP2 CD that included SP2 as
part of the base installation.
* You downloaded and installed Windows XP SP2 from the Microsoft Web site.
* Windows XP SP2 was included with the computer.
from...
http://support.microsoft.com/kb/916261

Explains a whole bunch about sfc.exe.
scannow sfc (sfc.exe)
http://www.updatexp.com/scannow-sfc.html

Description of Windows XP and Windows Server 2003 System File Checker
(Sfc.exe)
http://support.microsoft.com/kb/310747

HOW TO Verify That Windows File Protection Is Running
http://support.microsoft.com/kb/814597

Description of the Windows File Protection Feature
http://support.microsoft.com/kb/222193

System File Checker (sfc)
http://www.microsoft.com/resources/...p/all/proddocs/en-us/system_file_checker.mspx

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Kenneth]

Hi Wes,

I ran SFC, but it found no problem...

The issue off the time zone change remains.

Thanks for any further thoughts,