W32Time Event Id 27

[DJ]

Hi,

All of my workstations shows this error in the event viewer about every 10
secs. Does anyone have a quick fix for this.

Thanks

DJ

Event Type: Warning
Event Source: W32Time
Event Category: None
Event ID: 27
Date: 09/06/2005
Time: 2:49:29 PM
User: N/A
Computer: KCX3KXL
Description:
Time Provider NtpClient: The response received from domain controller
Testserver.testssver.on.ca is missing the signature. The response may have
been tampered with and will be ignored.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[Andrei Ungureanu]

from Technet:

Explanation
Your computer should be a member of a domain, and any responses from
the domain controller should be signed (authenticated) by the domain
controller. This event can indicate a security situation or that your
computer is part of a domain and your account was deleted.

The cause might be one of the following:

a.. A domain controller has been configured as a manual time source.
b.. The computer is synchronizing with both a manual time source and
a domain time source (type=AllSync) where one or more domain controllers in
the domain is configured as the manual time source.


User Action
Do one or all of the following:

a.. Verify with an Administrator that this computer account is valid
in Active Directory.
b.. Verify that no domain controllers are present in the manual time
source list.
c.. Configure an alternative manual time source. If your computer is
part of a domain, then it should get its time source from the domain
controller. The configuration can be modified by using the w32tm command
line tool and manipulating the syncfromflags option.