Windows 2003 W32TM connection to Time Server problem

J

jon mateo

Hi,

We have a domain controller that has a problem syncronizing to an external
time server. I tried almost all the solution posted in this forum and to
other forum in the Internet and still it does not work.

I also tried to use the command w32tm /unregister and w32tm /register to
reset all registry entries for w32time service but still it can't connect to
the time server.

I look at the firewall and the policy allows udp 123 to the time server and
their are no logs coming from my DC on udp port 123 going to the time server.
I used ethereal to captured the packet when I command w32tm /resync, but I
could not see any udp 123 request going to my time server.

On the DC, I command

C:\WINDOWS>w32tm /resync
Sending resync command to local computer...
The computer did not resync because no time data was available.

c:\w32tm /monitor
ICMMADB.DOMAIN.COM *** PDC ***
ICMP: 0ms delay.
NTP: error WSAECONNRESET - no server listening on NTP port

C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5
The following arguments were unexpected: /computer:icmtnzaw5
Exiting with error 0x80070057

To add up to my problem, there is no events log on Windows event viewer, the
last w32time log that I had was last sept 29, 2007 @ 4:10:49 PM.

Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM
The time service has not synchronized the system time for 86400 seconds
because none of the time service providers provided a usable time stamp. The
time service is no longer synchronized and cannot provide the time to other
clients or update the system clock. Monitor the system events displayed in
the Event Viewer to make sure that a more serious problem does not exist.

I activate the debug log of w32time, hope you can better analyze the problem.
w32tm.log
148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update
148579 01:42:45.2656250s - W32TmServiceMain: Param change notification
148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':
148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
148579 01:42:45.2656250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001
148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':
148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
148579 01:42:45.2656250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000
148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:42:45.2656250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:42:45.2656250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:42:45.2656250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:42:45.2656250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:42:45.2656250s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:42:45.2656250s - No params changed for local clock.
148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s
148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update
148579 01:47:47.6406250s - W32TmServiceMain: Param change notification
148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':
148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
148579 01:47:47.6406250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001
148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':
148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
148579 01:47:47.6406250s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000
148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:47:47.6406250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:47:47.6406250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:47:47.6406250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:47:47.6406250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:47:47.6406250s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:47:47.6406250s - No params changed for local clock.
148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s
148579 01:51:33.6250000s - W32TmServiceMain: timeout
148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s
148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin
(S-1-5-21-2000478354-362288127-839522115-500)
148579 01:52:47.0156250s - RPC Call - HardResync
148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip
Notification **********
148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -
ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0 RDs:100000000
TSF:0x0
148579 01:52:47.0156250s - ClockDispln: we're a reliable time service with
no time source: LS: 0, TN: 864000000000, WAIT: 86400000
148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s (1024.000s)
148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update
148579 01:52:49.8750000s - W32TmServiceMain: Param change notification
148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':
148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
148579 01:52:49.8750000s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001
148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':
148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
148579 01:52:49.8750000s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000
148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpClient':
148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpServer':
148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530
148579 01:52:49.8750000s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005
148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800
148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005
148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F
148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148579 01:52:49.8750000s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0
148579 01:52:49.8750000s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0
148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002
148579 01:52:49.8750000s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C
148579 01:52:49.8750000s - ReadConfig: failed. Use default one
'TimeJumpAuditOffset'=0x00007080
148579 01:52:49.8750000s - No params changed for local clock.
148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0 not
changed.
148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s (1021.140s)
148579 01:53:03.0312500s - W32TmServiceMain: timeout
148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s

*********************************************************



Domain Controller W32time Registry entries
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,00,63,\
00,65,00,00,00
"DisplayName"="Windows Time"
"ObjectName"="NT AUTHORITY\\LocalService"
"Description"="Maintains date and time synchronization on all clients and
servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start."

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]
"LastClockRate"=dword:0002625a
"MinClockRate"=dword:000260d4
"MaxClockRate"=dword:000263e0
"FrequencyCorrectRate"=dword:00000004
"PollAdjustFactor"=dword:00000005
"LargePhaseOffset"=dword:02faf080
"SpikeWatchPeriod"=dword:00000384
"HoldPeriod"=dword:00000005
"LocalClockDispersion"=dword:0000000a
"EventLogFlags"=dword:00000002
"PhaseCorrectRate"=dword:00000007
"MinPollInterval"=dword:00000006
"MaxPollInterval"=dword:0000000a
"MaxNegPhaseCorrection"=dword:ffffffff
"MaxPosPhaseCorrection"=dword:ffffffff
"UpdateInterval"=dword:00000064
"AnnounceFlags"=dword:00000005
"MaxAllowedPhaseOffset"=dword:0000012c
"FileLogSize"=dword:00989680
"FileLogName"="c:\\windows\\temp\\w32tm.log"
"FileLogEntries"="0-116"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parameters]
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\
32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"Type"="NTP"
"NtpServer"="timeserver,0x1"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security]
"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\
00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\
00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\
00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\
01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient]
"Enabled"=dword:00000001
"InputProvider"=dword:00000001
"AllowNonstandardModeCombinations"=dword:00000001
"CrossSiteSyncFlags"=dword:00000002
"ResolvePeerBackoffMinutes"=dword:0000000f
"ResolvePeerBackoffMaxTimes"=dword:00000007
"CompatibilityFlags"=dword:80000000
"EventLogFlags"=dword:00000001
"LargeSampleSkew"=dword:00000003
"DllName"="C:\\WINDOWS\\system32\\w32time.dll"
"SpecialPollTimeRemaining"=hex(7):00,00
"SpecialPollInterval"=dword:00000e10

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpServer]
"InputProvider"=dword:00000000
"AllowNonstandardModeCombinations"=dword:00000001
"DllName"="C:\\WINDOWS\\system32\\w32time.dll"
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum]
"0"="Root\\LEGACY_W32TIME\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001




C:\WINDOWS>netstat -an (Time Server)

Active Connections

Proto Local Address Foreign Address State
*
*
UDP 0.0.0.0:161 *:*
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:1029 *:*
UDP 0.0.0.0:1051 *:*
UDP 0.0.0.0:1052 *:*
UDP 0.0.0.0:1065 *:*
UDP 0.0.0.0:1655 *:*
UDP 0.0.0.0:2967 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5632 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1027 *:*
UDP 127.0.0.1:1038 *:*
UDP 127.0.0.1:1050 *:*
UDP 127.0.0.1:1056 *:*
UDP 127.0.0.1:1070 *:*
UDP 127.0.0.1:1155 *:*
UDP 127.0.0.1:1158 *:*
UDP 127.0.0.1:2262 *:*
UDP 210.12.169.206:123 *:*
UDP 210.12.169.206:88 *:*
UDP 210.12.169.206:137 *:*
UDP 210.12.169.206:138 *:*
UDP 210.12.169.206:389 *:*
UDP 210.12.169.206:464 *:*

Thanks.
 
M

Meinolf Weber

Hello jon,

Is this DC the PDCEmulator? Have you changed the Operating ssytem and also
the PDCEmulator to another machine before?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> Hi,
>
> We have a domain controller that has a problem syncronizing to an
> external time server. I tried almost all the solution posted in this
> forum and to other forum in the Internet and still it does not work.
>
> I also tried to use the command w32tm /unregister and w32tm /register
> to reset all registry entries for w32time service but still it can't
> connect to the time server.
>
> I look at the firewall and the policy allows udp 123 to the time
> server and their are no logs coming from my DC on udp port 123 going
> to the time server. I used ethereal to captured the packet when I
> command w32tm /resync, but I could not see any udp 123 request going
> to my time server.
>
> On the DC, I command
>
> C:\WINDOWS>w32tm /resync
> Sending resync command to local computer...
> The computer did not resync because no time data was available.
> c:\w32tm /monitor
> ICMMADB.DOMAIN.COM *** PDC ***
> ICMP: 0ms delay.
> NTP: error WSAECONNRESET - no server listening on NTP port
> C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5
> The following arguments were unexpected: /computer:icmtnzaw5
> Exiting with error 0x80070057
> To add up to my problem, there is no events log on Windows event
> viewer, the last w32time log that I had was last sept 29, 2007 @
> 4:10:49 PM.
>
> Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM
> The time service has not synchronized the system time for 86400
> seconds
> because none of the time service providers provided a usable time
> stamp. The
> time service is no longer synchronized and cannot provide the time to
> other
> clients or update the system clock. Monitor the system events
> displayed in
> the Event Viewer to make sure that a more serious problem does not
> exist.
> I activate the debug log of w32time, hope you can better analyze the
> problem.
> w32tm.log
> 148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update
> 148579 01:42:45.2656250s - W32TmServiceMain: Param change notification
> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':
> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
> 148579 01:42:45.2656250s - ReadConfig:
> 'DllName'='C:\WINDOWS\system32\w32time.dll'
> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001
> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':
> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
> 148579 01:42:45.2656250s - ReadConfig:
> 'DllName'='C:\WINDOWS\system32\w32time.dll'
> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000
> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider
> 'NtpClient':
> 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider
> 'NtpServer':
> 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
> 148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
> 148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530
> 148579 01:42:45.2656250s - ReadConfig:
> 'FrequencyCorrectRate'=0x00000004
> 148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005
> 148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800
> 148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
> 148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005
> 148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A
> 148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F
> 148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A
> 148579 01:42:45.2656250s - ReadConfig:
> 'LocalClockDispersion'=0x0000000A
> 148579 01:42:45.2656250s - ReadConfig:
> 'MaxNegPhaseCorrection'=0x0000D2F0
> 148579 01:42:45.2656250s - ReadConfig:
> 'MaxPosPhaseCorrection'=0x0000D2F0
> 148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002
> 148579 01:42:45.2656250s - ReadConfig:
> 'MaxAllowedPhaseOffset'=0x0000012C
> 148579 01:42:45.2656250s - ReadConfig: failed. Use default one
> 'TimeJumpAuditOffset'=0x00007080
> 148579 01:42:45.2656250s - No params changed for local clock.
> 148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0
> not
> changed.
> 148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s
> 148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update
> 148579 01:47:47.6406250s - W32TmServiceMain: Param change notification
> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':
> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
> 148579 01:47:47.6406250s - ReadConfig:
> 'DllName'='C:\WINDOWS\system32\w32time.dll'
> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001
> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':
> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
> 148579 01:47:47.6406250s - ReadConfig:
> 'DllName'='C:\WINDOWS\system32\w32time.dll'
> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000
> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider
> 'NtpClient':
> 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider
> 'NtpServer':
> 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
> 148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
> 148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530
> 148579 01:47:47.6406250s - ReadConfig:
> 'FrequencyCorrectRate'=0x00000004
> 148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005
> 148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800
> 148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
> 148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005
> 148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A
> 148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F
> 148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A
> 148579 01:47:47.6406250s - ReadConfig:
> 'LocalClockDispersion'=0x0000000A
> 148579 01:47:47.6406250s - ReadConfig:
> 'MaxNegPhaseCorrection'=0x0000D2F0
> 148579 01:47:47.6406250s - ReadConfig:
> 'MaxPosPhaseCorrection'=0x0000D2F0
> 148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002
> 148579 01:47:47.6406250s - ReadConfig:
> 'MaxAllowedPhaseOffset'=0x0000012C
> 148579 01:47:47.6406250s - ReadConfig: failed. Use default one
> 'TimeJumpAuditOffset'=0x00007080
> 148579 01:47:47.6406250s - No params changed for local clock.
> 148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0
> not
> changed.
> 148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s
> 148579 01:51:33.6250000s - W32TmServiceMain: timeout
> 148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s
> 148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin
> (S-1-5-21-2000478354-362288127-839522115-500)
> 148579 01:52:47.0156250s - RPC Call - HardResync
> 148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip
> Notification **********
> 148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -
> ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0
> RDs:100000000
> TSF:0x0
> 148579 01:52:47.0156250s - ClockDispln: we're a reliable time service
> with
> no time source: LS: 0, TN: 864000000000, WAIT: 86400000
> 148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s
> (1024.000s)
> 148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update
> 148579 01:52:49.8750000s - W32TmServiceMain: Param change notification
> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':
> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
> 148579 01:52:49.8750000s - ReadConfig:
> 'DllName'='C:\WINDOWS\system32\w32time.dll'
> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001
> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':
> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
> 148579 01:52:49.8750000s - ReadConfig:
> 'DllName'='C:\WINDOWS\system32\w32time.dll'
> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000
> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider
> 'NtpClient':
> 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider
> 'NtpServer':
> 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
> 148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001
> 148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530
> 148579 01:52:49.8750000s - ReadConfig:
> 'FrequencyCorrectRate'=0x00000004
> 148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005
> 148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800
> 148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
> 148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005
> 148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A
> 148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F
> 148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A
> 148579 01:52:49.8750000s - ReadConfig:
> 'LocalClockDispersion'=0x0000000A
> 148579 01:52:49.8750000s - ReadConfig:
> 'MaxNegPhaseCorrection'=0x0000D2F0
> 148579 01:52:49.8750000s - ReadConfig:
> 'MaxPosPhaseCorrection'=0x0000D2F0
> 148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002
> 148579 01:52:49.8750000s - ReadConfig:
> 'MaxAllowedPhaseOffset'=0x0000012C
> 148579 01:52:49.8750000s - ReadConfig: failed. Use default one
> 'TimeJumpAuditOffset'=0x00007080
> 148579 01:52:49.8750000s - No params changed for local clock.
> 148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0
> not
> changed.
> 148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s
> (1021.140s)
> 148579 01:53:03.0312500s - W32TmServiceMain: timeout
> 148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s
> *********************************************************
>
> Domain Controller W32time Registry entries Windows Registry Editor
> Version 5.00
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]
> "Type"=dword:00000020
> "Start"=dword:00000002
> "ErrorControl"=dword:00000001
> "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,
> 00,6f,00,\
>
> 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,0
> 0,73,\
>
> 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2
> d,00,\
>
> 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,0
> 0,63,\
> 00,65,00,00,00
> "DisplayName"="Windows Time"
> "ObjectName"="NT AUTHORITY\\LocalService"
> "Description"="Maintains date and time synchronization on all clients
> and
> servers in the network. If this service is stopped, date and time
> synchronization will be unavailable. If this service is disabled, any
> services that explicitly depend on it will fail to start."
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]
> "LastClockRate"=dword:0002625a
> "MinClockRate"=dword:000260d4
> "MaxClockRate"=dword:000263e0
> "FrequencyCorrectRate"=dword:00000004
> "PollAdjustFactor"=dword:00000005
> "LargePhaseOffset"=dword:02faf080
> "SpikeWatchPeriod"=dword:00000384
> "HoldPeriod"=dword:00000005
> "LocalClockDispersion"=dword:0000000a
> "EventLogFlags"=dword:00000002
> "PhaseCorrectRate"=dword:00000007
> "MinPollInterval"=dword:00000006
> "MaxPollInterval"=dword:0000000a
> "MaxNegPhaseCorrection"=dword:ffffffff
> "MaxPosPhaseCorrection"=dword:ffffffff
> "UpdateInterval"=dword:00000064
> "AnnounceFlags"=dword:00000005
> "MaxAllowedPhaseOffset"=dword:0000012c
> "FileLogSize"=dword:00989680
> "FileLogName"="c:\\windows\\temp\\w32tm.log"
> "FileLogEntries"="0-116"
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Paramete
> rs]
> "ServiceMain"="SvchostEntry_W32Time"
> "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57
> ,00,53,\
>
> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,3
> 3,00,\
> 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
> "Type"="NTP"
> "NtpServer"="timeserver,0x1"
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security
> ]
> "Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,0
> 0,00,02,\
>
> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,0
> 0,00,\
>
> 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,0
> 0,00,\
>
> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,0
> 0,00,\
>
> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,0
> 0,00,\
>
> 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,0
> 0,01,\
>
> 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,0
> 2,00,\
>
> 00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,0
> 0,00,\
> 01,01,00,00,00,00,00,05,12,00,00,00
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv
> iders]
>
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv
> iders\NtpClient]
> "Enabled"=dword:00000001
> "InputProvider"=dword:00000001
> "AllowNonstandardModeCombinations"=dword:00000001
> "CrossSiteSyncFlags"=dword:00000002
> "ResolvePeerBackoffMinutes"=dword:0000000f
> "ResolvePeerBackoffMaxTimes"=dword:00000007
> "CompatibilityFlags"=dword:80000000
> "EventLogFlags"=dword:00000001
> "LargeSampleSkew"=dword:00000003
> "DllName"="C:\\WINDOWS\\system32\\w32time.dll"
> "SpecialPollTimeRemaining"=hex(7):00,00
> "SpecialPollInterval"=dword:00000e10
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv
> iders\NtpServer]
> "InputProvider"=dword:00000000
> "AllowNonstandardModeCombinations"=dword:00000001
> "DllName"="C:\\WINDOWS\\system32\\w32time.dll"
> "Enabled"=dword:00000001
> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum]
> "0"="Root\\LEGACY_W32TIME\\0000"
> "Count"=dword:00000001
> "NextInstance"=dword:00000001
> C:\WINDOWS>netstat -an (Time Server)
>
> Active Connections
>
> Proto Local Address Foreign Address State
> *
> *
> UDP 0.0.0.0:161 *:*
> UDP 0.0.0.0:445 *:*
> UDP 0.0.0.0:500 *:*
> UDP 0.0.0.0:1029 *:*
> UDP 0.0.0.0:1051 *:*
> UDP 0.0.0.0:1052 *:*
> UDP 0.0.0.0:1065 *:*
> UDP 0.0.0.0:1655 *:*
> UDP 0.0.0.0:2967 *:*
> UDP 0.0.0.0:4500 *:*
> UDP 0.0.0.0:5632 *:*
> UDP 127.0.0.1:123 *:*
> UDP 127.0.0.1:1027 *:*
> UDP 127.0.0.1:1038 *:*
> UDP 127.0.0.1:1050 *:*
> UDP 127.0.0.1:1056 *:*
> UDP 127.0.0.1:1070 *:*
> UDP 127.0.0.1:1155 *:*
> UDP 127.0.0.1:1158 *:*
> UDP 127.0.0.1:2262 *:*
> UDP 210.12.169.206:123 *:*
> UDP 210.12.169.206:88 *:*
> UDP 210.12.169.206:137 *:*
> UDP 210.12.169.206:138 *:*
> UDP 210.12.169.206:389 *:*
> UDP 210.12.169.206:464 *:*
> Thanks.
>
 
J

jon mateo

Hi Meinolf,

Yes, this is the PDC Emulator. I haven't tried re-installing the OS yet.
I'll try to change the PDCEmulator to another machine. I'll let you know what
will happen.

Cheers,

Jon

"Meinolf Weber" wrote:

> Hello jon,
>
> Is this DC the PDCEmulator? Have you changed the Operating ssytem and also
> the PDCEmulator to another machine before?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
>
> > Hi,
> >
> > We have a domain controller that has a problem syncronizing to an
> > external time server. I tried almost all the solution posted in this
> > forum and to other forum in the Internet and still it does not work.
> >
> > I also tried to use the command w32tm /unregister and w32tm /register
> > to reset all registry entries for w32time service but still it can't
> > connect to the time server.
> >
> > I look at the firewall and the policy allows udp 123 to the time
> > server and their are no logs coming from my DC on udp port 123 going
> > to the time server. I used ethereal to captured the packet when I
> > command w32tm /resync, but I could not see any udp 123 request going
> > to my time server.
> >
> > On the DC, I command
> >
> > C:\WINDOWS>w32tm /resync
> > Sending resync command to local computer...
> > The computer did not resync because no time data was available.
> > c:\w32tm /monitor
> > ICMMADB.DOMAIN.COM *** PDC ***
> > ICMP: 0ms delay.
> > NTP: error WSAECONNRESET - no server listening on NTP port
> > C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5
> > The following arguments were unexpected: /computer:icmtnzaw5
> > Exiting with error 0x80070057
> > To add up to my problem, there is no events log on Windows event
> > viewer, the last w32time log that I had was last sept 29, 2007 @
> > 4:10:49 PM.
> >
> > Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM
> > The time service has not synchronized the system time for 86400
> > seconds
> > because none of the time service providers provided a usable time
> > stamp. The
> > time service is no longer synchronized and cannot provide the time to
> > other
> > clients or update the system clock. Monitor the system events
> > displayed in
> > the Event Viewer to make sure that a more serious problem does not
> > exist.
> > I activate the debug log of w32time, hope you can better analyze the
> > problem.
> > w32tm.log
> > 148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update
> > 148579 01:42:45.2656250s - W32TmServiceMain: Param change notification
> > 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':
> > 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'DllName'='C:\WINDOWS\system32\w32time.dll'
> > 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001
> > 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':
> > 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'DllName'='C:\WINDOWS\system32\w32time.dll'
> > 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000
> > 148579 01:42:45.2656250s - ReadConfig (policy): Found provider
> > 'NtpClient':
> > 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
> > 148579 01:42:45.2656250s - ReadConfig (policy): Found provider
> > 'NtpServer':
> > 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000
> > 148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
> > 148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'FrequencyCorrectRate'=0x00000004
> > 148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005
> > 148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800
> > 148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
> > 148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005
> > 148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A
> > 148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F
> > 148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'LocalClockDispersion'=0x0000000A
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'MaxNegPhaseCorrection'=0x0000D2F0
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'MaxPosPhaseCorrection'=0x0000D2F0
> > 148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002
> > 148579 01:42:45.2656250s - ReadConfig:
> > 'MaxAllowedPhaseOffset'=0x0000012C
> > 148579 01:42:45.2656250s - ReadConfig: failed. Use default one
> > 'TimeJumpAuditOffset'=0x00007080
> > 148579 01:42:45.2656250s - No params changed for local clock.
> > 148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0
> > not
> > changed.
> > 148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s
> > 148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update
> > 148579 01:47:47.6406250s - W32TmServiceMain: Param change notification
> > 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':
> > 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'DllName'='C:\WINDOWS\system32\w32time.dll'
> > 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001
> > 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':
> > 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'DllName'='C:\WINDOWS\system32\w32time.dll'
> > 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000
> > 148579 01:47:47.6406250s - ReadConfig (policy): Found provider
> > 'NtpClient':
> > 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
> > 148579 01:47:47.6406250s - ReadConfig (policy): Found provider
> > 'NtpServer':
> > 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000
> > 148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
> > 148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'FrequencyCorrectRate'=0x00000004
> > 148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005
> > 148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800
> > 148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
> > 148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005
> > 148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A
> > 148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F
> > 148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'LocalClockDispersion'=0x0000000A
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'MaxNegPhaseCorrection'=0x0000D2F0
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'MaxPosPhaseCorrection'=0x0000D2F0
> > 148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002
> > 148579 01:47:47.6406250s - ReadConfig:
> > 'MaxAllowedPhaseOffset'=0x0000012C
> > 148579 01:47:47.6406250s - ReadConfig: failed. Use default one
> > 'TimeJumpAuditOffset'=0x00007080
> > 148579 01:47:47.6406250s - No params changed for local clock.
> > 148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0
> > not
> > changed.
> > 148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s
> > 148579 01:51:33.6250000s - W32TmServiceMain: timeout
> > 148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s
> > 148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin
> > (S-1-5-21-2000478354-362288127-839522115-500)
> > 148579 01:52:47.0156250s - RPC Call - HardResync
> > 148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip
> > Notification **********
> > 148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -
> > ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0
> > RDs:100000000
> > TSF:0x0
> > 148579 01:52:47.0156250s - ClockDispln: we're a reliable time service
> > with
> > no time source: LS: 0, TN: 864000000000, WAIT: 86400000
> > 148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s
> > (1024.000s)
> > 148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update
> > 148579 01:52:49.8750000s - W32TmServiceMain: Param change notification
> > 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':
> > 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'DllName'='C:\WINDOWS\system32\w32time.dll'
> > 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001
> > 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':
> > 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'DllName'='C:\WINDOWS\system32\w32time.dll'
> > 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000
> > 148579 01:52:49.8750000s - ReadConfig (policy): Found provider
> > 'NtpClient':
> > 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
> > 148579 01:52:49.8750000s - ReadConfig (policy): Found provider
> > 'NtpServer':
> > 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000
> > 148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001
> > 148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'FrequencyCorrectRate'=0x00000004
> > 148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005
> > 148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800
> > 148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
> > 148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005
> > 148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A
> > 148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F
> > 148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'LocalClockDispersion'=0x0000000A
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'MaxNegPhaseCorrection'=0x0000D2F0
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'MaxPosPhaseCorrection'=0x0000D2F0
> > 148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002
> > 148579 01:52:49.8750000s - ReadConfig:
> > 'MaxAllowedPhaseOffset'=0x0000012C
> > 148579 01:52:49.8750000s - ReadConfig: failed. Use default one
> > 'TimeJumpAuditOffset'=0x00007080
> > 148579 01:52:49.8750000s - No params changed for local clock.
> > 148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0
> > not
> > changed.
> > 148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s
> > (1021.140s)
> > 148579 01:53:03.0312500s - W32TmServiceMain: timeout
> > 148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s
> > *********************************************************
> >
> > Domain Controller W32time Registry entries Windows Registry Editor
> > Version 5.00
> >
> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]
> > "Type"=dword:00000020
> > "Start"=dword:00000002
> > "ErrorControl"=dword:00000001
> > "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,
> > 00,6f,00,\
> >
> > 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,0
> > 0,73,\
> >
> > 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2
> > d,00,\
> >
> > 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,0
> > 0,63,\
> > 00,65,00,00,00
> > "DisplayName"="Windows Time"
> > "ObjectName"="NT AUTHORITY\\LocalService"
> > "Description"="Maintains date and time synchronization on all clients
> > and
> > servers in the network. If this service is stopped, date and time
> > synchronization will be unavailable. If this service is disabled, any
> > services that explicitly depend on it will fail to start."
> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]
> > "LastClockRate"=dword:0002625a
> > "MinClockRate"=dword:000260d4
> > "MaxClockRate"=dword:000263e0
> > "FrequencyCorrectRate"=dword:00000004
> > "PollAdjustFactor"=dword:00000005
> > "LargePhaseOffset"=dword:02faf080
> > "SpikeWatchPeriod"=dword:00000384
> > "HoldPeriod"=dword:00000005
> > "LocalClockDispersion"=dword:0000000a
> > "EventLogFlags"=dword:00000002
> > "PhaseCorrectRate"=dword:00000007
> > "MinPollInterval"=dword:00000006
> > "MaxPollInterval"=dword:0000000a
> > "MaxNegPhaseCorrection"=dword:ffffffff
> > "MaxPosPhaseCorrection"=dword:ffffffff
> > "UpdateInterval"=dword:00000064
> > "AnnounceFlags"=dword:00000005
> > "MaxAllowedPhaseOffset"=dword:0000012c
> > "FileLogSize"=dword:00989680
> > "FileLogName"="c:\\windows\\temp\\w32tm.log"
> > "FileLogEntries"="0-116"
> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Paramete
> > rs]
> > "ServiceMain"="SvchostEntry_W32Time"
> > "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57
> > ,00,53,\
> >
> > 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,3
> > 3,00,\
> > 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
> > "Type"="NTP"
> > "NtpServer"="timeserver,0x1"
> >
> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security
> > ]
> > "Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,0
> > 0,00,02,\
> >
> > 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,0
> > 0,00,\
> >
> > 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,0
> > 0,00,\
> >
> > 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,0
> > 0,00,\
> >
> > 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,0
> > 0,00,\
> >
> > 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,0
> > 0,01,\
> >
> > 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,0
> > 2,00,\
> >
> > 00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,0
> > 0,00,\
> > 01,01,00,00,00,00,00,05,12,00,00,00
> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv
 
M

Meinolf Weber

Hello jon,

I did not talk about reinstalling the Operating system. I meant if you have
upgraded from 2000 to 2003 for example.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> Hi Meinolf,
>
> Yes, this is the PDC Emulator. I haven't tried re-installing the OS
> yet. I'll try to change the PDCEmulator to another machine. I'll let
> you know what will happen.
>
> Cheers,
>
> Jon
>
> "Meinolf Weber" wrote:
>
>> Hello jon,
>>
>> Is this DC the PDCEmulator? Have you changed the Operating ssytem and
>> also the PDCEmulator to another machine before?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>>> Hi,
>>>
>>> We have a domain controller that has a problem syncronizing to an
>>> external time server. I tried almost all the solution posted in this
>>> forum and to other forum in the Internet and still it does not work.
>>>
>>> I also tried to use the command w32tm /unregister and w32tm
>>> /register to reset all registry entries for w32time service but
>>> still it can't connect to the time server.
>>>
>>> I look at the firewall and the policy allows udp 123 to the time
>>> server and their are no logs coming from my DC on udp port 123 going
>>> to the time server. I used ethereal to captured the packet when I
>>> command w32tm /resync, but I could not see any udp 123 request going
>>> to my time server.
>>>
>>> On the DC, I command
>>>
>>> C:\WINDOWS>w32tm /resync
>>> Sending resync command to local computer...
>>> The computer did not resync because no time data was available.
>>> c:\w32tm /monitor
>>> ICMMADB.DOMAIN.COM *** PDC ***
>>> ICMP: 0ms delay.
>>> NTP: error WSAECONNRESET - no server listening on NTP port
>>> C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5
>>> The following arguments were unexpected: /computer:icmtnzaw5
>>> Exiting with error 0x80070057
>>> To add up to my problem, there is no events log on Windows event
>>> viewer, the last w32time log that I had was last sept 29, 2007 @
>>> 4:10:49 PM.
>>> Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM
>>> The time service has not synchronized the system time for 86400
>>> seconds
>>> because none of the time service providers provided a usable time
>>> stamp. The
>>> time service is no longer synchronized and cannot provide the time
>>> to
>>> other
>>> clients or update the system clock. Monitor the system events
>>> displayed in
>>> the Event Viewer to make sure that a more serious problem does not
>>> exist.
>>> I activate the debug log of w32time, hope you can better analyze the
>>> problem.
>>> w32tm.log
>>> 148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update
>>> 148579 01:42:45.2656250s - W32TmServiceMain: Param change
>>> notification
>>> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':
>>> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'
>>> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001
>>> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':
>>> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'
>>> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000
>>> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider
>>> 'NtpClient':
>>> 148579 01:42:45.2656250s - ReadConfig (policy):
>>> 'Enabled'=0x00000000
>>> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider
>>> 'NtpServer':
>>> 148579 01:42:45.2656250s - ReadConfig (policy):
>>> 'Enabled'=0x00000000
>>> 148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
>>> 148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'FrequencyCorrectRate'=0x00000004
>>> 148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005
>>> 148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800
>>> 148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
>>> 148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005
>>> 148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A
>>> 148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F
>>> 148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'LocalClockDispersion'=0x0000000A
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'MaxNegPhaseCorrection'=0x0000D2F0
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'MaxPosPhaseCorrection'=0x0000D2F0
>>> 148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002
>>> 148579 01:42:45.2656250s - ReadConfig:
>>> 'MaxAllowedPhaseOffset'=0x0000012C
>>> 148579 01:42:45.2656250s - ReadConfig: failed. Use default one
>>> 'TimeJumpAuditOffset'=0x00007080
>>> 148579 01:42:45.2656250s - No params changed for local clock.
>>> 148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0
>>> not
>>> changed.
>>> 148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s
>>> 148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update
>>> 148579 01:47:47.6406250s - W32TmServiceMain: Param change
>>> notification
>>> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':
>>> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'
>>> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001
>>> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':
>>> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'
>>> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000
>>> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider
>>> 'NtpClient':
>>> 148579 01:47:47.6406250s - ReadConfig (policy):
>>> 'Enabled'=0x00000000
>>> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider
>>> 'NtpServer':
>>> 148579 01:47:47.6406250s - ReadConfig (policy):
>>> 'Enabled'=0x00000000
>>> 148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001
>>> 148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'FrequencyCorrectRate'=0x00000004
>>> 148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005
>>> 148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800
>>> 148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
>>> 148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005
>>> 148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A
>>> 148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F
>>> 148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'LocalClockDispersion'=0x0000000A
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'MaxNegPhaseCorrection'=0x0000D2F0
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'MaxPosPhaseCorrection'=0x0000D2F0
>>> 148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002
>>> 148579 01:47:47.6406250s - ReadConfig:
>>> 'MaxAllowedPhaseOffset'=0x0000012C
>>> 148579 01:47:47.6406250s - ReadConfig: failed. Use default one
>>> 'TimeJumpAuditOffset'=0x00007080
>>> 148579 01:47:47.6406250s - No params changed for local clock.
>>> 148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0
>>> not
>>> changed.
>>> 148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s
>>> 148579 01:51:33.6250000s - W32TmServiceMain: timeout
>>> 148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s
>>> 148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin
>>> (S-1-5-21-2000478354-362288127-839522115-500)
>>> 148579 01:52:47.0156250s - RPC Call - HardResync
>>> 148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip
>>> Notification **********
>>> 148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -
>>> ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0
>>> RDs:100000000
>>> TSF:0x0
>>> 148579 01:52:47.0156250s - ClockDispln: we're a reliable time
>>> service
>>> with
>>> no time source: LS: 0, TN: 864000000000, WAIT: 86400000
>>> 148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s
>>> (1024.000s)
>>> 148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update
>>> 148579 01:52:49.8750000s - W32TmServiceMain: Param change
>>> notification
>>> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':
>>> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'
>>> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001
>>> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':
>>> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'
>>> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000
>>> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider
>>> 'NtpClient':
>>> 148579 01:52:49.8750000s - ReadConfig (policy):
>>> 'Enabled'=0x00000000
>>> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider
>>> 'NtpServer':
>>> 148579 01:52:49.8750000s - ReadConfig (policy):
>>> 'Enabled'=0x00000000
>>> 148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001
>>> 148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'FrequencyCorrectRate'=0x00000004
>>> 148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005
>>> 148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800
>>> 148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A
>>> 148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005
>>> 148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A
>>> 148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F
>>> 148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'LocalClockDispersion'=0x0000000A
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'MaxNegPhaseCorrection'=0x0000D2F0
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'MaxPosPhaseCorrection'=0x0000D2F0
>>> 148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002
>>> 148579 01:52:49.8750000s - ReadConfig:
>>> 'MaxAllowedPhaseOffset'=0x0000012C
>>> 148579 01:52:49.8750000s - ReadConfig: failed. Use default one
>>> 'TimeJumpAuditOffset'=0x00007080
>>> 148579 01:52:49.8750000s - No params changed for local clock.
>>> 148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0
>>> not
>>> changed.
>>> 148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s
>>> (1021.140s)
>>> 148579 01:53:03.0312500s - W32TmServiceMain: timeout
>>> 148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s
>>> *********************************************************
>>> Domain Controller W32time Registry entries Windows Registry Editor
>>> Version 5.00
>>>
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]
>>> "Type"=dword:00000020
>>> "Start"=dword:00000002
>>> "ErrorControl"=dword:00000001
>>> "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6
>>> f,
>>> 00,6f,00,\
>>> 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c
>>> ,0 0,73,\
>>>
>>> 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00
>>> ,2 d,00,\
>>>
>>> 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69
>>> ,0
>>> 0,63,\
>>> 00,65,00,00,00
>>> "DisplayName"="Windows Time"
>>> "ObjectName"="NT AUTHORITY\\LocalService"
>>> "Description"="Maintains date and time synchronization on all
>>> clients
>>> and
>>> servers in the network. If this service is stopped, date and time
>>> synchronization will be unavailable. If this service is disabled,
>>> any
>>> services that explicitly depend on it will fail to start."
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config
>>> ]
>>> "LastClockRate"=dword:0002625a
>>> "MinClockRate"=dword:000260d4
>>> "MaxClockRate"=dword:000263e0
>>> "FrequencyCorrectRate"=dword:00000004
>>> "PollAdjustFactor"=dword:00000005
>>> "LargePhaseOffset"=dword:02faf080
>>> "SpikeWatchPeriod"=dword:00000384
>>> "HoldPeriod"=dword:00000005
>>> "LocalClockDispersion"=dword:0000000a
>>> "EventLogFlags"=dword:00000002
>>> "PhaseCorrectRate"=dword:00000007
>>> "MinPollInterval"=dword:00000006
>>> "MaxPollInterval"=dword:0000000a
>>> "MaxNegPhaseCorrection"=dword:ffffffff
>>> "MaxPosPhaseCorrection"=dword:ffffffff
>>> "UpdateInterval"=dword:00000064
>>> "AnnounceFlags"=dword:00000005
>>> "MaxAllowedPhaseOffset"=dword:0000012c
>>> "FileLogSize"=dword:00989680
>>> "FileLogName"="c:\\windows\\temp\\w32tm.log"
>>> "FileLogEntries"="0-116"
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parame
>>> te
>>> rs]
>>> "ServiceMain"="SvchostEntry_W32Time"
>>> "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,
>>> 57
>>> ,00,53,\
>>> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00
>>> ,3
>>> 3,00,\
>>> 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
>>> "Type"="NTP"
>>> "NtpServer"="timeserver,0x1"
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Securi
>>> ty ]
>>> "Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00
>>> ,0 0,00,02,\
>>>
>>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01
>>> ,0 0,00,\
>>>
>>> 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00
>>> ,0 0,00,\
>>>
>>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00
>>> ,0 0,00,\
>>>
>>> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00
>>> ,0 0,00,\
>>>
>>> 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00
>>> ,0 0,01,\
>>>
>>> 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01
>>> ,0 2,00,\
>>>
>>> 00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00
>>> ,0
>>> 0,00,\
>>> 01,01,00,00,00,00,00,05,12,00,00,00
>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimePr
>>> ov
 

Similar threads

S
Replies
0
Views
670
Surendra Kumar V
S
M
Replies
0
Views
1K
Maciej Tremark
M
M
Replies
36
Views
1K
Robinson Zhang [MSFT]
R
Back
Top Bottom