Re: Time Synchronization

Hi,

Thanks for your update!

Please perform test to collect some information to isolate the issue:

1. Is the Time service on the SBS 2003 server running? And Is the Startup
type "Automatic"?

2. How you add client computers to the SBS 2003 domain? Please try to
disjoin one computer from domain and then rejoin it back to test, can it
synchronize time with server?

For your reference, I list the detail steps:

1). Quit the workstation from the domain. To do so, see:

Locate in Client Computers in Server Management console and choose the
computer the customer has in right panel. Click Remove from network link to
delete the computer from domain.

2). Setup the client computer by running Setup Client Computer wizard to
setup computer account.

3). In the client computer, try to join it to domain by running
http://servername/connectcomputer. And assign appropriate user accounts to
the computer.

Note: Please ensure you have added the SBS Site (http://FQDN/*) in trusted
site in IE of the laptop. You can refer to the following steps:

a. Start Internet Explorer.
b. On the Tools menu, click Internet Options.
c. On the Security tab, click Local intranet zone, and then click Sites.
d. Click Advanced.
e. In the Add this Web site to the zone box, type the ConnectComputer
server's IP address or the ConnectComputer server's FQDN, and then click
Add.

Try to test again and check if everything is OK.

3. Please add the following commands in the SBS_LOGIN_SCRIPT.bat logon
script so that they will run automatically when the users log on their
client computers, and then Re-logon client computers, how about the result?

net stop w32time
net time /setsntp:<SBS2003_Server_Name>
net start w32time

NOTE: Substitue <SBS2003_Server_Name> with the SBS 2003 server''s NetBIOS
name, FQDN or internal IP address

*Note: that the users must be in their local administrators group otherwise
they do not have enough permission to run the command son their
workstations).

This logon file is located at C:\WINDOWS\SYSVOL\sysvol\<Domain FQDN>\scripts

4. Please also help me collect some log files for analyze the issue:

1). Please run command "IPconfig /all" (no quotations marks) respectively
in server side and any client workstation to get IP report to me.

2). Please save a text copy of Application /System log for analyze:

a. Open Event Viewer: Start -> All Programs -> Administrative Tools ->
Event Viewer.
b. Right-click on Application/System log and select "Save Log File As?".

Please add files to a zip file and mail me the information at:
v-yanniw@xxxxxxxxxxxxx

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Time Synchronization
>thread-index: AcXvfETf+UALEfV8SXayj4+srAKSEg==
>X-WBNR-Posting-Host: 66.160.67.150
>From: =?Utf-8?B?QUFT?= <AAS@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <D18A19E6-90B2-4513-89D5-555AF2589852@xxxxxxxxxxxxx>
<S1Ief.157776$iC7.49210@xxxxxxxxxxxxxxxxxxxxxx>
<J861ET16FHA.1240@xxxxxxxxxxxxxxxxxxxxx>
<6E3A5FCD-4B8F-46E2-B9D2-1F21A9E4EA01@xxxxxxxxxxxxx>
<yylO51n7FHA.1240@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: Time Synchronization
>Date: Tue, 22 Nov 2005 07:49:06 -0800
>Lines: 309
>Message-ID: <EBA5912A-EF15-4CBD-B1A7-24BAD6626269@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224628
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks Jenny:
>
>All clients and the SBS Box are not synchornized.
>--
>AAS
>
>
>""Jenny wu [MSFT]"" wrote:
>
>> Hi,
>>
>> Thanks for your update!
>>
>> I am sorry for the delayed response due to weekend. Please understand
that
>> the newsgroups are staffed weekdays by Microsoft Support professionals
to
>> answer your systems and applications questions. Your understanding is
>> greatly appreciated!
>>
>> Basically speaking, there are two levels of time synchronization in a
>> domain environment. The first level is the internal time
synchronization.
>> In a domain environment, the workstations synch the time with the domain
>> controller. This can keep the time consistency internally. The second
level
>> is the external time synchronization. This means that the domain
controller
>> synchronizes the time with an external time source. When we join a
>> workstation into a domain, the workstations are configured to
synchronize
>> the time with the domain controller by default so that it is not
necessary
>> to configure the time settings on the internal workstations.
>>
>> Regarding the time service issue occurred on the SBS 2003 server, I
would
>> like to provide you with the following action plan:
>>
>> I. Make sure that the Time service on the SBS 2003 server is enabled.
>>
>> For the SBS server, the time server may be disabled by some software.
>> Please try the following steps to enable the time service on the SBS
server:
>>
>> 1. Open Services console in 'Administrative Tools'.
>>
>> 2. Double-click Windows Time service. Change the startup type from
Disable
>> to Automatic.
>>
>> 3. Open Registry editor (regedit); navigate to the following registry:
>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\
>>
>> Double-click 'Type' value in the right panel. Change the value data from
>> NoSync to NT5DS
>>
>> 4. Go to the service console, double-click the Windows Time service and
>> click 'Start' button to start the service.
>>
>> The above steps will make the server to respond the internal time synch
>> requests. Go to the Windows XP workstation, open a command prompt, run
the
>> following command to perform a test:
>>
>> w32tm /monitor /computers:localhost
>>
>> [ex]. C:\>w32tm /monitor /computers:localhost
>> localhost [127.0.0.1]:
>> ICMP: 0ms delay.
>> NTP: +0.0000000s offset from local clock
>> RefID: ntdev-dc-10.ntdev.microsoft.com [x.x.x.x]
>> The computer returned on the RefID line is the time server with whom the
>> client is synchronizing its time.
>>
>> II. For ISA server is installed on the SBS box, ensure that the packet
>> filters for time synchronization has been properly configured:
>> 1. In the ISA Server management tool, expand the management nodes that
are
>> beneath your server name.
>>
>> 2. Expand the Access Policy branch to view the list of access policies.
>>
>> 3. Right-click IP Packet Filters, point to New, and then click Filter to
>> start the New IP Packet Filter Wizard.
>>
>> 4. Type a descriptive name for the filter (such as "SNTP Allow Filter"
>> (without the quotation marks)), and then click Next.
>>
>> 5. Click Allow packet transmission as the Filter Mode, and then click
Next.
>>
>> 6. Click Custom as the filter type, and then click Next.
>>
>> 7. On the Filter Settings page, click UDP for the IP protocol, click
"Send
>> receive" for the direction, "All ports" as the local port, click "Fixed
>> port" as the remote port, use port 123 as the remote port number, and
then
>> click Next.
>>
>> 8. Keep the default settings by clicking Next through the next two
wizard
>> pages, and then click Finish at the Completing The New IP Packet Filter
>> Wizard page.
>>
>> 9. Go to Monitoring\Services and restart the Firewall service. Check if
the
>> issue disappears.
>>
>> For more info, see:
>> 323621 How To Configure the Simple Network Time Protocol (SNTP) on ISA
>> Server
>> http://support.microsoft.com/?id=323621
>>
>> III. Reconfigure the Windows time service
>> Open a command prompt and run the following commands to re-configure the
>> time service to sync time with time.nist.gov:
>>
>> w32tm /config /manualpeerlist:time.nist.gov,0x8 /syncfromflags:MANUAL
>>
>> w32tm /config /update
>>
>> net stop w32time
>>
>> net start w32time
>>
>> And then please try to test to see if the issue be fixed.
>>
>> I appreciate you taking time to perform the tests. I am happy to be
>> assistance and look forward to your reply!
>>
>> Have a nice day!
>>
>> Sincerely,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: Time Synchronization
>> >thread-index: AcXsfyJU7iEkeimDTSKyS9gcrouOvw==
>> >X-WBNR-Posting-Host: 66.160.67.150
>> >From: =?Utf-8?B?QUFT?= <AAS@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >References: <D18A19E6-90B2-4513-89D5-555AF2589852@xxxxxxxxxxxxx>
>> <S1Ief.157776$iC7.49210@xxxxxxxxxxxxxxxxxxxxxx>
>> <J861ET16FHA.1240@xxxxxxxxxxxxxxxxxxxxx>
>> >Subject: Re: Time Synchronization
>> >Date: Fri, 18 Nov 2005 12:32:03 -0800
>> >Lines: 140
>> >Message-ID: <6E3A5FCD-4B8F-46E2-B9D2-1F21A9E4EA01@xxxxxxxxxxxxx>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:223622
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >Thanks Jenny:
>> >
>> >I tried your suggestions. But the clients did not sync. I had
previously
>> >followed the instructions in Article 875424 and run the following
command
>> on
>> >the SBS Server:
>> >w32tm /config /manualpeerlist:NTP_server_IP_Address,0x8
>> /syncfromflags:MANUAL
>> >
>> >I had provided the NIST servers IP address. Do I need to undo that?
>> >--
>> >AAS
>> >
>> >
>> >""Jenny wu [MSFT]"" wrote:
>> >
>> >> Hi,
>> >>
>> >> Thanks for using the SBS newsgroup! Also thanks for Jim's input.
>> >>
>> >> For your description, I understand that you have some problem in
>> >> synchronizing time between the SBS server and client computers. If I
am
>> off
>> >> base, please don't hesitate to let me know.
>> >>
>> >> Please follow below steps to refresh the time service to synchronize
>> time
>> >> with time server:
>> >>
>> >> The w32time service problem may prevent client from properly
accessing
>> your
>> >> domain resources. Please try to start the Windows Time service
(w32time)
>> >> and see if the issue can be resolved.
>> >>
>> >> A. Let''s open a command prompt and run the following commands to
stop
>> and
>> >> restart w32time service:
>> >>
>> >> *****net stop w32time
>> >> *****net start w32time
>> >>
>> >> Also check if you have a hardware router/firewall in front of your
SBS
>> >> server, if so, please open Registry Editor (regedit), go to
>> >>
>>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
>> >> , change the value from whatever to Nt5DS and restart the W32Time
>> service.
>> >>
>> >> Maue sure the service''s startup type is set to automatic.
>> >>
>> >> B. Please run the following command to make client workstations
>> synchronize
>> >> time with the SBS 2003 server:
>> >> net time /setsntp:<SBS_Server_Name>
>> >> NOTE: Replace <SBS_Server_Name> with the real server name of the SBS
>> 2003
>> >> server.
>> >> After doing the above steps, reboot client workstations and then try
to
>> >> logon the domain. How about the result?
>> >> For more info:
>> >> 816042 How to configure the Windows Time service on a Windows Server
>> >> 2003-based
>> >> http://support.microsoft.com/?id=816042
>> >>
>> >> Hope above information helps! If you have any further concern or
>> question
>> >> on the issue please let me know. I am happy to be assistance of you
and
>> >> look forward to your reply!
>> >>
>> >> Have a nice day!
>> >>
>> >> Sincerely,
>> >>
>> >> Jenny Wu
>> >> Microsoft CSS Online Newsgroup Support
>> >> Get Secure! - www.microsoft.com/security
>> >> ======================================================
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
>> are
>> >> any updates in your thread. When responding to posts via your
>> newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from
your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ======================================================
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >> --------------------
>> >> >From: "Jim Staunton" <sbsbofh@xxxxxxxxxxxxxx>
>> >> >Newsgroups: microsoft.public.windows.server.sbs
>> >> >References: <D18A19E6-90B2-4513-89D5-555AF2589852@xxxxxxxxxxxxx>
>> >> >Subject: Re: Time Synchronization
>> >> >Lines: 20
>> >> >X-Priority: 3
>> >> >X-MSMail-Priority: Normal
>> >> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>> >> >X-RFC2646: Format=Flowed; Original
>> >> >Message-ID: <S1Ief.157776$iC7.49210@xxxxxxxxxxxxxxxxxxxxxx>
>> >> >X-Complaints-To: abuse@xxxxxxxxxxxx
>> >> >Organization: EasyNews, UseNet made Easy!
>> >> >X-Complaints-Info: Please be sure to forward a copy of ALL headers
>> >> otherwise we will be unable to process your complaint properly.
>> >> >Date: Wed, 16 Nov 2005 15:15:01 GMT
>> >> >Path:
>> >>
>>
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
>> >>
>>
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!cyclone1.gnilink.net!g
>> >>
>>
nilink.net!newsfeed.news2me.com!newsfeed2.easynews.com!easynews.com!easynews
>> >> !easynews-local!fe08.news.easynews.com.POSTED!not-for-mail
>> >> >Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.sbs:222840
>

.