Re: Time synchronisaton from SBS2k3 to stratum 2 time source

From: Dave Nickason [SBS MVP] (gwdibble_at_NOSPAM.frontiernet.net)
Date: 02/10/04


Date: Tue, 10 Feb 2004 12:40:17 -0500

Are you getting an error message indicating that the sync is failing, or do
you just know it because the time is wrong? ISA will allow the traffic with
windows time running under local system because of the packet filter you
created. There are several things that could cause the time service to
fail, but I don't really understand the symptom you're seeing.

"Karl Middleton" <kmiddlet@icrystal.dot.com.dot.au> wrote in message
news:uJMu4S97DHA.2676@TK2MSFTNGP10.phx.gbl...
> Dave,
>
> I don't think so. I have the packet filter open for UDP 123 traffic.
>
> I think it is permissions related.
>
> W32TIME runs under the local system account. I believe that ISA will not
> allow anything through that runs under local system. Changing the logon
name
> for the service doesn't work: generates an error message.
>
> There is a knowledgebase article that talks about changing ACLs on the
proxy
> server. It reads like it is for Microsoft Proxy Server 2.0 so the article
> has not been updated for ISA (don't Microsoft ever test out what their Kb
> articles tell us poor dumb users to do?). As I said, I can't find how to
> change the ACL in ISA to do the same thing as MS Proxy 2.0
>
> Any thoughts?
>
>
> "Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in
message
> news:%23FrccLN7DHA.2924@tk2msftngp13.phx.gbl...
> > Is this just an issue with the packet filter in ISA? See this article -
> the
> > first section describes the packet filter you need to create to allow
> sntp.
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;323621
> >
> >
> > "Karl Middleton" <kmiddlet@icrystal.dot.com.dot.au> wrote in message
> > news:Oj8G4PI7DHA.1460@tk2msftngp13.phx.gbl...
> > > Good evening NG,
> > >
> > > Has anyone solved how to configure SBS2k3 Premium to let SNTP out to
the
> > > Internet to sync with a stratum 2 time source? On SBS2k I kludged
using
> > the
> > > batch file on the MS Kb site running w32tm -once but the -once switch
> > > doesn't work on w32tm under SBS2k3.
> > >
> > > My preference is to set the filters/permissions on ISA server to let
the
> > > w32time service check the stratum 2 source. The Kb article talks about
> > > setting ACLs on the Proxy on IIS. I don't understand what they mean
and
> > > can't find such a beastie on the IIS manager.
> > >
> > > Can anyone assist?
> > >
> > > Thanks
> > > Karl from Oz
> > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Time synchronisaton from SBS2k3 to stratum 2 time source
    ... I have the packet filter open for UDP 123 traffic. ... W32TIME runs under the local system account. ... There is a knowledgebase article that talks about changing ACLs on the proxy ... has not been updated for ISA (don't Microsoft ever test out what their Kb ...
    (microsoft.public.windows.server.sbs)
  • Re: Pitney Bowes unable to connect through ISA
    ... Which leads to: ... Error message when you try to access a Web site from a Web browser client ... that is located behind a computer that is running ISA Server 2004 with SP2: ... Contact your ISA Server administrator. ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Management
    ... In answer to your questions the error message for "At least one data sample ... Dashboard, the message appears whenever I click on the Dashboard tab. ... connect to the ISA server? ... Allow remote management fom selected computers policy. ...
    (microsoft.public.isa)
  • Unable to access OWA Website after creating publishing rules
    ... I created a publishing rule to access OWA in ISA 2006 But after creating ... the rule on the server I get the following error message: ... Error Code: 504 Proxy Timeout. ... I also get this error message on the client as well. ...
    (microsoft.public.isa.publishing)
  • ISA 2004 Forms Based Authentication
    ... We are using ISA 2004 with FBA to publish Outlook Web Access. ... we want our users to be forced to type in Domain\Userid on the OWA ... the error message is displayed. ... error message to display when they forget to enter the domain name? ...
    (microsoft.public.isa)