Jump to content

Domain time - clients not synching with DC


Recommended Posts

Guest EdRoche
Posted

For some reason the clients in our domain are not synching the time with the

domain controller - I presume should be default behaviour. They are out but

only a few minutes but it is v annoying and sometimes causes people not to

get their mapped drives. I would put a net time line into the login script

but as most users are not admins on the local PCs they dont have access to

change time under their account. The client firewalls are on and I included a

port exception for 123 UDP.

 

Should the clients update their time automatically with the DC

automatically? Can someone explain a simple and straight forward solution?

 

Thanks

  • Replies 6
  • Created
  • Last Reply
Guest Anthony [MVP]
Posted

Re: Domain time - clients not synching with DC

 

Ed,

Yes it should be automatic so you need to investigate why its not happening.

You can execute a resync with this:

http://technet.microsoft.com/en-us/library/cc758905.aspx

Do you have errors in the event logs of the PC's relating to time or DC

connection? How far out are the PC's?

Anthony,

http://www.airdesk.com

 

 

 

"EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...

> For some reason the clients in our domain are not synching the time with

> the

> domain controller - I presume should be default behaviour. They are out

> but

> only a few minutes but it is v annoying and sometimes causes people not to

> get their mapped drives. I would put a net time line into the login script

> but as most users are not admins on the local PCs they dont have access to

> change time under their account. The client firewalls are on and I

> included a

> port exception for 123 UDP.

>

> Should the clients update their time automatically with the DC

> automatically? Can someone explain a simple and straight forward solution?

>

> Thanks

Guest Meinolf Weber
Posted

Re: Domain time - clients not synching with DC

 

Hello EdRoche,

 

Check out this command at the clients:

 

w32tm /config /syncfromflags:domhier /update

 

After that run:

 

net stop w32time

 

net start w32time

 

Did you test it on one machine with the firewall disabled? Also make sure

that you only use domain internal DNS servers.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> For some reason the clients in our domain are not synching the time

> with the domain controller - I presume should be default behaviour.

> They are out but only a few minutes but it is v annoying and sometimes

> causes people not to get their mapped drives. I would put a net time

> line into the login script but as most users are not admins on the

> local PCs they dont have access to change time under their account.

> The client firewalls are on and I included a port exception for 123

> UDP.

>

> Should the clients update their time automatically with the DC

> automatically? Can someone explain a simple and straight forward

> solution?

>

> Thanks

>

Guest EdRoche
Posted

Re: Domain time - clients not synching with DC

 

Hi Anthony,

 

Thanks for that. There are about 100 clients here and going to each isnt an

option. The w32tm /config /syncfromflags:domhier /update command need to be

run as an administrator and all clients have non-admin access to the local

PCs on the domain. Is there a vb script version of this I can include in my

login linked with group policy or how can this be done centrally?

 

Thanks

 

"Anthony [MVP]" wrote:

> Ed,

> Yes it should be automatic so you need to investigate why its not happening.

> You can execute a resync with this:

> http://technet.microsoft.com/en-us/library/cc758905.aspx

> Do you have errors in the event logs of the PC's relating to time or DC

> connection? How far out are the PC's?

> Anthony,

> http://www.airdesk.com

>

>

>

> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...

> > For some reason the clients in our domain are not synching the time with

> > the

> > domain controller - I presume should be default behaviour. They are out

> > but

> > only a few minutes but it is v annoying and sometimes causes people not to

> > get their mapped drives. I would put a net time line into the login script

> > but as most users are not admins on the local PCs they dont have access to

> > change time under their account. The client firewalls are on and I

> > included a

> > port exception for 123 UDP.

> >

> > Should the clients update their time automatically with the DC

> > automatically? Can someone explain a simple and straight forward solution?

> >

> > Thanks

>

>

Guest Anthony [MVP]
Posted

Re: Domain time - clients not synching with DC

 

Ed,

You can use a computer Startup script to do that. Its in the computer

configuration part of the GPO.

It should happen automatically so I would be inclined to investigate why it

is not,

Anthony,

http://www.airdesk.com

 

"EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

news:AB4833D5-12F2-4BA1-A890-EFCDD97A6667@microsoft.com...

> Hi Anthony,

>

> Thanks for that. There are about 100 clients here and going to each isnt

> an

> option. The w32tm /config /syncfromflags:domhier /update command need to

> be

> run as an administrator and all clients have non-admin access to the local

> PCs on the domain. Is there a vb script version of this I can include in

> my

> login linked with group policy or how can this be done centrally?

>

> Thanks

>

> "Anthony [MVP]" wrote:

>

>> Ed,

>> Yes it should be automatic so you need to investigate why its not

>> happening.

>> You can execute a resync with this:

>> http://technet.microsoft.com/en-us/library/cc758905.aspx

>> Do you have errors in the event logs of the PC's relating to time or DC

>> connection? How far out are the PC's?

>> Anthony,

>> http://www.airdesk.com

>>

>>

>>

>> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

>> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...

>> > For some reason the clients in our domain are not synching the time

>> > with

>> > the

>> > domain controller - I presume should be default behaviour. They are out

>> > but

>> > only a few minutes but it is v annoying and sometimes causes people not

>> > to

>> > get their mapped drives. I would put a net time line into the login

>> > script

>> > but as most users are not admins on the local PCs they dont have access

>> > to

>> > change time under their account. The client firewalls are on and I

>> > included a

>> > port exception for 123 UDP.

>> >

>> > Should the clients update their time automatically with the DC

>> > automatically? Can someone explain a simple and straight forward

>> > solution?

>> >

>> > Thanks

>>

>>

Guest EdRoche
Posted

Re: Domain time - clients not synching with DC

 

Thanks Anthony,

 

If I put the script in the GPO will the command have the necessary

privileges to execute if the user account logging on to the PC is not an

administrator?

 

Any ideas why the time is not synching automatically? I have no more ideas.

 

 

"Anthony [MVP]" wrote:

> Ed,

> You can use a computer Startup script to do that. Its in the computer

> configuration part of the GPO.

> It should happen automatically so I would be inclined to investigate why it

> is not,

> Anthony,

> http://www.airdesk.com

>

> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

> news:AB4833D5-12F2-4BA1-A890-EFCDD97A6667@microsoft.com...

> > Hi Anthony,

> >

> > Thanks for that. There are about 100 clients here and going to each isnt

> > an

> > option. The w32tm /config /syncfromflags:domhier /update command need to

> > be

> > run as an administrator and all clients have non-admin access to the local

> > PCs on the domain. Is there a vb script version of this I can include in

> > my

> > login linked with group policy or how can this be done centrally?

> >

> > Thanks

> >

> > "Anthony [MVP]" wrote:

> >

> >> Ed,

> >> Yes it should be automatic so you need to investigate why its not

> >> happening.

> >> You can execute a resync with this:

> >> http://technet.microsoft.com/en-us/library/cc758905.aspx

> >> Do you have errors in the event logs of the PC's relating to time or DC

> >> connection? How far out are the PC's?

> >> Anthony,

> >> http://www.airdesk.com

> >>

> >>

> >>

> >> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

> >> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...

> >> > For some reason the clients in our domain are not synching the time

> >> > with

> >> > the

> >> > domain controller - I presume should be default behaviour. They are out

> >> > but

> >> > only a few minutes but it is v annoying and sometimes causes people not

> >> > to

> >> > get their mapped drives. I would put a net time line into the login

> >> > script

> >> > but as most users are not admins on the local PCs they dont have access

> >> > to

> >> > change time under their account. The client firewalls are on and I

> >> > included a

> >> > port exception for 123 UDP.

> >> >

> >> > Should the clients update their time automatically with the DC

> >> > automatically? Can someone explain a simple and straight forward

> >> > solution?

> >> >

> >> > Thanks

> >>

> >>

>

Guest Anthony [MVP]
Posted

Re: Domain time - clients not synching with DC

 

Hi Ed,

A startup script runs in the computer Local System security context when the

computer starts, before the user logs in.

What exact errors do you see in the Event Logs? Anthony,

http://www.airdesk.com

 

 

"EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

news:431E0DD5-9003-4D0F-A79B-78BF3E97A447@microsoft.com...

> Thanks Anthony,

>

> If I put the script in the GPO will the command have the necessary

> privileges to execute if the user account logging on to the PC is not an

> administrator?

>

> Any ideas why the time is not synching automatically? I have no more

> ideas.

>

>

> "Anthony [MVP]" wrote:

>

>> Ed,

>> You can use a computer Startup script to do that. Its in the computer

>> configuration part of the GPO.

>> It should happen automatically so I would be inclined to investigate why

>> it

>> is not,

>> Anthony,

>> http://www.airdesk.com

>>

>> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

>> news:AB4833D5-12F2-4BA1-A890-EFCDD97A6667@microsoft.com...

>> > Hi Anthony,

>> >

>> > Thanks for that. There are about 100 clients here and going to each

>> > isnt

>> > an

>> > option. The w32tm /config /syncfromflags:domhier /update command need

>> > to

>> > be

>> > run as an administrator and all clients have non-admin access to the

>> > local

>> > PCs on the domain. Is there a vb script version of this I can include

>> > in

>> > my

>> > login linked with group policy or how can this be done centrally?

>> >

>> > Thanks

>> >

>> > "Anthony [MVP]" wrote:

>> >

>> >> Ed,

>> >> Yes it should be automatic so you need to investigate why its not

>> >> happening.

>> >> You can execute a resync with this:

>> >> http://technet.microsoft.com/en-us/library/cc758905.aspx

>> >> Do you have errors in the event logs of the PC's relating to time or

>> >> DC

>> >> connection? How far out are the PC's?

>> >> Anthony,

>> >> http://www.airdesk.com

>> >>

>> >>

>> >>

>> >> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message

>> >> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...

>> >> > For some reason the clients in our domain are not synching the time

>> >> > with

>> >> > the

>> >> > domain controller - I presume should be default behaviour. They are

>> >> > out

>> >> > but

>> >> > only a few minutes but it is v annoying and sometimes causes people

>> >> > not

>> >> > to

>> >> > get their mapped drives. I would put a net time line into the login

>> >> > script

>> >> > but as most users are not admins on the local PCs they dont have

>> >> > access

>> >> > to

>> >> > change time under their account. The client firewalls are on and I

>> >> > included a

>> >> > port exception for 123 UDP.

>> >> >

>> >> > Should the clients update their time automatically with the DC

>> >> > automatically? Can someone explain a simple and straight forward

>> >> > solution?

>> >> >

>> >> > Thanks

>> >>

>> >>

>>


×
×
  • Create New...