T
The Victim
Specifically, what is being queried to provide the time source when I run this command?:
W32TM /QUERY /SOURCE
At this point, I only know that it is NOT this value: "HKLM\CurrentControlSet\Services\w32time\Parameters\NtpServer". This is because nothing I enter as the value of this key has any effect. This includes manually deleting the NtpServer key and purging all W32Time settings by unregistering and reregistering the service.
Continue reading...
W32TM /QUERY /SOURCE
At this point, I only know that it is NOT this value: "HKLM\CurrentControlSet\Services\w32time\Parameters\NtpServer". This is because nothing I enter as the value of this key has any effect. This includes manually deleting the NtpServer key and purging all W32Time settings by unregistering and reregistering the service.
Continue reading...