RE: Win2K3 PDC not acting as time server

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 08/16/04 

Date: Mon, 16 Aug 2004 12:12:33 GMT

Hi Jerry,

I did not get your email yet.

I would like to recommend that you transfer all the FSMO roles including
PDC Emulator to another DC. Please make sure that you have run the
"gpupdate /force" command after modify GPO.

Reference:

How To View and Transfer FSMO Roles in Windows Server 2003
http://support.microsoft.com/?id=324801

What is the result?

Regards,
Bob Qin
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
      From: =?Utf-8?B?SmVycnlU?= <JerryT@discussions.microsoft.com>
      Subject: RE: Win2K3 PDC not acting as time server
      Date: Sun, 15 Aug 2004 16:47:04 -0700
      Newsgroups: microsoft.public.windows.server.migration
      
      Bob,
      I did as you recommended. Set a GPO for the domain controlers and one
for
      the domain. Have reset the time service several times, with the same
result.
      The PDC seems to be syncing OK, the other DC is still having problems.
      And neither of them are acting as time servers, no client can
synchronize to
      either one.
      
      
      Oddly the w32tm /resync command succeeds on both DCs, nothing
reported in
      the log, but returns success.Still the DC continues to report
problems.
      
      I am still using Proxy 2.0 server on my edge (replacement with IAS
planned).
      But since I am using access control on that proxy I cannot have DC
sync to
      external through it. However it is setup as an NTP server. This has
been in
      place and working for some time. So I set the DC's to sync to that
machine as
      their external time source.
      
      I am sending you the logs via email, since this news server refuses
to
      accept attached files of any size.
      Really a pain, I have typed this message about three times now.
      
      To help understand the logs: The PDC is Hawk, DC is Swift and proxy
is Pelican
      
      Thanks for you help
      
      "Bob Qin [MSFT]" wrote:
      
> Hi Jerry,
>
> You can try to set a GPO for Domain Controllers to use "AllSync"
and point
> to a external time server. Set "No Override" for this Domain
Controller
> policy. Then set a GPO on domain level to use NT5DS synchronization.
>
> Please make sure you use the FQDN name in the Group Policy settings.
>
> If the problem still persists, please attach the SysEvent.Evt file
in your
> post.
>
> Best regards,
> Bob Qin
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
>
> ====================================================
> When responding to posts, please "Reply to Group" via your
newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> --------------------
> From: =?Utf-8?B?SmVycnlU?= <JerryT@discussions.microsoft.com>
> Subject: RE: Win2K3 PDC not acting as time server
> Date: Thu, 12 Aug 2004 10:19:02 -0700
> Newsgroups: microsoft.public.windows.server.migration
>
> Bob,
> Thanks for the reply - however.
>
> I have configured GPO for Domain Controllers to act as NTP
servers.
> They do so for about one minute and then stop responding.
>
> I was having problems with event logs filling up so I resized
them
> correctly, cleared them all. Double checked to make sure I
had
> W32Time.dll
> installed per Q832261 and restarted my PDC.
>
> If I restart the Windows Time Service on the PDC I can sync
to it
> from the
> other DC for about one minute then it stops responding.
>
> These commands issued from other DC
>
> Before restarting Windows Time on PDC
>
> C:\>w32tm /resync
> Sending resync command to local computer...
> The computer did not resync because no time data was
available.
>
> At this point I have restarted the Windows Time Service on PDC
>
> C:\>w32tm /resync
> Sending resync command to local computer...
> The command completed successfully.
>
> C:\>w32tm /resync
> Sending resync command to local computer...
> The command completed successfully.
>
> About 1 minute later
>
> C:\>w32tm /resync
> Sending resync command to local computer...
> The computer did not resync because no time data was
available.
>
> This is beginning to make me crazy(er).
>
>
> "Bob Qin [MSFT]" wrote:
>
> > Hi Jerry,
> >
> > Thanks for your posting here.
> >
> > You can try run the following command on other DC and
clients.
> >
> > w32tm /resync
> >
> > Please make sure that you have point the DCs and clients to
the
> same
> > internal DNS server.
> >
> > You can also try to set the the time service settings using
domain
> level
> > group policy in Windows 2003 AD. The settings is in the
following
> location
> > in group policy.
> >
> > Computer Configuration\Administrative
Templates\System\Windows
> Time Service
> >
> > Have a nice day!
> >
> > Regards,
> > Bob Qin
> > Microsoft Online Partner Support
> >
> > Get Secure! - www.microsoft.com/security
> >
> > ====================================================
> > When responding to posts, please "Reply to Group" via your
> newsreader so
> > that others may learn and benefit from your issue.
> > ====================================================
> > This posting is provided "AS IS" with no warranties, and
confers no
> rights.
> >
> > --------------------
> > From: =?Utf-8?B?SmVycnlU?=
<JerryT@discussions.microsoft.com>
> > Subject: Win2K3 PDC not acting as time server
> > Date: Wed, 11 Aug 2004 12:49:08 -0700
> > Newsgroups: microsoft.public.windows.server.migration
> >
> > I upgraded my old NT4 PDC and BDC to Win2K3. The PDC
is
> configured to
> > synchronize with an external time source. Based on
eventlog
> and
> > testing with
> > w32tm it is synchronizing correctly.
> >
> > However neither the other DC or any of the XP clients
are
> able to
> > synch with
> > it. It doesn't appear to be acting as an NTP server.
On the
> other DC
> > (old
> > BDC) I get event messages from W32Time 38, 24, 29 in
> sequence.
> >
> > Have applied 832261 and 830092 (restarting after
application
> in each
> > case)
> > still no go.
> >
> > From reading other posts I see there is a GPO to
configure
> the server
> > as an
> > NTP server. Is this what I should try next?
> >
> > TIA
> >
> >
> >
> >
>
>
>
      

Relevant Pages

  • Re: Replication failing due to time differences
    ... Both DCs in the same forest I presume? ... Under the Windows Time model, each DC should sync with the PDC on up to ...
    (microsoft.public.win2000.active_directory)
  • Re: wrong time server
    ... It does not query what the local machine's time service is set to use with the domain hierarchy. ... It's rather useless trying to use it to find which server is the client's time service. ... All client desktops select an authenticating domain controller ) as their time source. ... The PDC of the current domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DC Time Server Problem after DC hardware migration
    ... this and see if it doesn't resolve it for you. ... I recently moved my PDC to a new hardware platform. ... BINGPDC is not advertising as a time server. ... I've even seen in my event logs from the PDC that the time service IS ...
    (microsoft.public.win2000.active_directory)
  • Re: DNS not syncing between PDC and BDC
    ... all DCs should be of the same SP level due to variances. ... But first, just an FYI, there is no such thing as a PDC or BDC in Active ... The FSMO roles can be transferred dynamically between DCs. ... you may have a possible DNS misconfiguration. ...
    (microsoft.public.win2000.dns)
  • Re: Adprep
    ... If you loose the DC with the FSMO role, your network will survive until that ... If you have run dcpromo it is now a DC you could just transfer the PDC ... does that mean the FSMO roles do also? ... In terms of running adprep during production hours, ...
    (microsoft.public.windows.server.migration)