Computers in domain with Windows Time service disabled
hi all,
i've strange problem here. i've lot of windows 7 sp1 computers joined domain, have windows time service disabled.
there's not gpo configures this. also, if set automatic , enable service, computers don't sync clocks domain (in hklm\system\currentcontrolset\services\w32tm\parameters, value of "type" "nosync"). way i've managed work running following commands:
- net stop w32time
- w32tm /unregister
- w32tm /register
- net start w32time
after this, value of "type" changes "nt5ds" , time syncs ok domain. don't know why happening, , how fix in w7 sp1 machines. dc's synchronized pdc.
any ideas?
it seems there may gpo created w32time other administrator , same have been deleted.as gpo deleted setting not reverted client machine.
recommend check directory service log if gpo created or deleted.if auditing of directory service access is enabled events logged else not logged.
due hotfix or script(containing w32time setting) deployed in n/w.since hklm\system\currentcontrolset\services\w32tm\parameters, value of "type" "nosync need set nt5ds , reboot pc.
if nos of client pc more can deploy policy same.you can apply startup script change same or configure gpo below
computer configuration\administrative templates\system\windows time service\time providers\configure windows ntp client nt5ds
https://msmvps.com/blogs/ad/archive/2008/11/14/must-have-group-policy-setting.aspx once done reboot pc setting take effect.
if type not set nt5ds on client workstation not synchronize domain hierarchy.
type : reg_sz
used control how computer synchronizes.
nt5ds = synchronize domain hierarchy [default]
ntp = synchronize manually configured source
nosync = not synchronize time
refernce link:http://support.microsoft.com/kb/223184
hope helps
best regards,
sandesh dubey.
mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator | blog
disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.
Windows Server > Directory Services
Comments
Post a Comment