Re: Windows Time Service accessing unknow IP address
- From: "Giuseppe Nacci" <giuseppe.nacci@xxxxxxxxxxxxx>
- Date: Wed, 14 Sep 2005 15:50:17 +0200
David wrote:
> Hi,
>
> We have a windows 2000 Advanced Server with (mostly) windows XP
> workstations.
> The DC is time synced to an external source, and appears to be the
> only time source listed in the w32time settings.
> The workstations are setup to sync to the DC and this also appears to
> be the only time source listed on the workstations.
> The actual time synchronisation works but there is an added side
> affect. All PCs including the server are attempting to access an
> unknown IP address - 191.168.1.225). I can see this on the firewall
> logs and also using a port scanner on the client PCs.
> Our internal subnet is configured for the 192.168.x.x range.
>
> This only happens when the Windows time Service is running, and using
> the port scanner I have confirmed that it is the svchost process
> started by W32time which is attempting the access
>
> Anybody got any ideas, where the rogue IP address could be coming
> from?
> Thanks,
> David
Is 191.168.1.225 your client?
To which server is syncro the DC?
The clients point to DC to syncro or where? Did u set it by GPO?
Remember that Time Syncro require port no.123 opened.
--
---
Giuseppe Nacci
Microsoft Certified System Engineer
Microsoft Certified Trainer
Security Manager
.
- Follow-Ups:
- References:
- Windows Time Service accessing unknow IP address
- From: David
- Windows Time Service accessing unknow IP address
- Prev by Date: Re: Minor Win2k Win2k3 problem
- Next by Date: Re: 2003 SP1 Issue
- Previous by thread: Windows Time Service accessing unknow IP address
- Next by thread: Re: Windows Time Service accessing unknow IP address
- Index(es):
Relevant Pages
|