Jump to content

Windows 2003 W32TM connection to Time Server problem


Recommended Posts

Guest jon mateo
Posted

Hi,

 

We have a domain controller that has a problem syncronizing to an external

time server. I tried almost all the solution posted in this forum and to

other forum in the Internet and still it does not work.

 

I also tried to use the command w32tm /unregister and w32tm /register to

reset all registry entries for w32time service but still it can't connect to

the time server.

 

I look at the firewall and the policy allows udp 123 to the time server and

their are no logs coming from my DC on udp port 123 going to the time server.

I used ethereal to captured the packet when I command w32tm /resync, but I

could not see any udp 123 request going to my time server.

 

On the DC, I command

 

C:\WINDOWS>w32tm /resync

Sending resync command to local computer...

The computer did not resync because no time data was available.

 

c:\w32tm /monitor

ICMMADB.DOMAIN.COM *** PDC ***

ICMP: 0ms delay.

NTP: error WSAECONNRESET - no server listening on NTP port

 

C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5

The following arguments were unexpected: /computer:icmtnzaw5

Exiting with error 0x80070057

 

To add up to my problem, there is no events log on Windows event viewer, the

last w32time log that I had was last sept 29, 2007 @ 4:10:49 PM.

 

Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM

The time service has not synchronized the system time for 86400 seconds

because none of the time service providers provided a usable time stamp. The

time service is no longer synchronized and cannot provide the time to other

clients or update the system clock. Monitor the system events displayed in

the Event Viewer to make sure that a more serious problem does not exist.

 

I activate the debug log of w32time, hope you can better analyze the problem.

w32tm.log

148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update

148579 01:42:45.2656250s - W32TmServiceMain: Param change notification

148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':

148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

148579 01:42:45.2656250s - ReadConfig:

'DllName'='C:\WINDOWS\system32\w32time.dll'

148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001

148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':

148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

148579 01:42:45.2656250s - ReadConfig:

'DllName'='C:\WINDOWS\system32\w32time.dll'

148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000

148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpClient':

148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000

148579 01:42:45.2656250s - ReadConfig (policy): Found provider 'NtpServer':

148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000

148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530

148579 01:42:45.2656250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004

148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005

148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800

148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005

148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A

148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F

148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A

148579 01:42:45.2656250s - ReadConfig: 'LocalClockDispersion'=0x0000000A

148579 01:42:45.2656250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0

148579 01:42:45.2656250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0

148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002

148579 01:42:45.2656250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C

148579 01:42:45.2656250s - ReadConfig: failed. Use default one

'TimeJumpAuditOffset'=0x00007080

148579 01:42:45.2656250s - No params changed for local clock.

148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0 not

changed.

148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s

148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update

148579 01:47:47.6406250s - W32TmServiceMain: Param change notification

148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':

148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

148579 01:47:47.6406250s - ReadConfig:

'DllName'='C:\WINDOWS\system32\w32time.dll'

148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001

148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':

148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

148579 01:47:47.6406250s - ReadConfig:

'DllName'='C:\WINDOWS\system32\w32time.dll'

148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000

148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpClient':

148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000

148579 01:47:47.6406250s - ReadConfig (policy): Found provider 'NtpServer':

148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000

148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530

148579 01:47:47.6406250s - ReadConfig: 'FrequencyCorrectRate'=0x00000004

148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005

148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800

148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005

148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A

148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F

148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A

148579 01:47:47.6406250s - ReadConfig: 'LocalClockDispersion'=0x0000000A

148579 01:47:47.6406250s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0

148579 01:47:47.6406250s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0

148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002

148579 01:47:47.6406250s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C

148579 01:47:47.6406250s - ReadConfig: failed. Use default one

'TimeJumpAuditOffset'=0x00007080

148579 01:47:47.6406250s - No params changed for local clock.

148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0 not

changed.

148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s

148579 01:51:33.6250000s - W32TmServiceMain: timeout

148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s

148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin

(S-1-5-21-2000478354-362288127-839522115-500)

148579 01:52:47.0156250s - RPC Call - HardResync

148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip

Notification **********

148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -

ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0 RDs:100000000

TSF:0x0

148579 01:52:47.0156250s - ClockDispln: we're a reliable time service with

no time source: LS: 0, TN: 864000000000, WAIT: 86400000

148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s (1024.000s)

148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update

148579 01:52:49.8750000s - W32TmServiceMain: Param change notification

148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':

148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

148579 01:52:49.8750000s - ReadConfig:

'DllName'='C:\WINDOWS\system32\w32time.dll'

148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001

148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':

148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

148579 01:52:49.8750000s - ReadConfig:

'DllName'='C:\WINDOWS\system32\w32time.dll'

148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000

148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpClient':

148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000

148579 01:52:49.8750000s - ReadConfig (policy): Found provider 'NtpServer':

148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000

148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001

148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530

148579 01:52:49.8750000s - ReadConfig: 'FrequencyCorrectRate'=0x00000004

148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005

148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800

148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005

148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A

148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F

148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A

148579 01:52:49.8750000s - ReadConfig: 'LocalClockDispersion'=0x0000000A

148579 01:52:49.8750000s - ReadConfig: 'MaxNegPhaseCorrection'=0x0000D2F0

148579 01:52:49.8750000s - ReadConfig: 'MaxPosPhaseCorrection'=0x0000D2F0

148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002

148579 01:52:49.8750000s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C

148579 01:52:49.8750000s - ReadConfig: failed. Use default one

'TimeJumpAuditOffset'=0x00007080

148579 01:52:49.8750000s - No params changed for local clock.

148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0 not

changed.

148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s (1021.140s)

148579 01:53:03.0312500s - W32TmServiceMain: timeout

148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s

 

*********************************************************

 

 

 

Domain Controller W32time Registry entries

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]

"Type"=dword:00000020

"Start"=dword:00000002

"ErrorControl"=dword:00000001

"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,00,63,\

00,65,00,00,00

"DisplayName"="Windows Time"

"ObjectName"="NT AUTHORITY\\LocalService"

"Description"="Maintains date and time synchronization on all clients and

servers in the network. If this service is stopped, date and time

synchronization will be unavailable. If this service is disabled, any

services that explicitly depend on it will fail to start."

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]

"LastClockRate"=dword:0002625a

"MinClockRate"=dword:000260d4

"MaxClockRate"=dword:000263e0

"FrequencyCorrectRate"=dword:00000004

"PollAdjustFactor"=dword:00000005

"LargePhaseOffset"=dword:02faf080

"SpikeWatchPeriod"=dword:00000384

"HoldPeriod"=dword:00000005

"LocalClockDispersion"=dword:0000000a

"EventLogFlags"=dword:00000002

"PhaseCorrectRate"=dword:00000007

"MinPollInterval"=dword:00000006

"MaxPollInterval"=dword:0000000a

"MaxNegPhaseCorrection"=dword:ffffffff

"MaxPosPhaseCorrection"=dword:ffffffff

"UpdateInterval"=dword:00000064

"AnnounceFlags"=dword:00000005

"MaxAllowedPhaseOffset"=dword:0000012c

"FileLogSize"=dword:00989680

"FileLogName"="c:\\windows\\temp\\w32tm.log"

"FileLogEntries"="0-116"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parameters]

"ServiceMain"="SvchostEntry_W32Time"

"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,33,00,\

32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00

"Type"="NTP"

"NtpServer"="timeserver,0x1"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security]

"Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\

05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,00,00,\

00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,00,01,\

00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,\

00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\

01,01,00,00,00,00,00,05,12,00,00,00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient]

"Enabled"=dword:00000001

"InputProvider"=dword:00000001

"AllowNonstandardModeCombinations"=dword:00000001

"CrossSiteSyncFlags"=dword:00000002

"ResolvePeerBackoffMinutes"=dword:0000000f

"ResolvePeerBackoffMaxTimes"=dword:00000007

"CompatibilityFlags"=dword:80000000

"EventLogFlags"=dword:00000001

"LargeSampleSkew"=dword:00000003

"DllName"="C:\\WINDOWS\\system32\\w32time.dll"

"SpecialPollTimeRemaining"=hex(7):00,00

"SpecialPollInterval"=dword:00000e10

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpServer]

"InputProvider"=dword:00000000

"AllowNonstandardModeCombinations"=dword:00000001

"DllName"="C:\\WINDOWS\\system32\\w32time.dll"

"Enabled"=dword:00000001

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum]

"0"="Root\\LEGACY_W32TIME\\0000"

"Count"=dword:00000001

"NextInstance"=dword:00000001

 

 

 

 

C:\WINDOWS>netstat -an (Time Server)

 

Active Connections

 

Proto Local Address Foreign Address State

*

*

UDP 0.0.0.0:161 *:*

UDP 0.0.0.0:445 *:*

UDP 0.0.0.0:500 *:*

UDP 0.0.0.0:1029 *:*

UDP 0.0.0.0:1051 *:*

UDP 0.0.0.0:1052 *:*

UDP 0.0.0.0:1065 *:*

UDP 0.0.0.0:1655 *:*

UDP 0.0.0.0:2967 *:*

UDP 0.0.0.0:4500 *:*

UDP 0.0.0.0:5632 *:*

UDP 127.0.0.1:123 *:*

UDP 127.0.0.1:1027 *:*

UDP 127.0.0.1:1038 *:*

UDP 127.0.0.1:1050 *:*

UDP 127.0.0.1:1056 *:*

UDP 127.0.0.1:1070 *:*

UDP 127.0.0.1:1155 *:*

UDP 127.0.0.1:1158 *:*

UDP 127.0.0.1:2262 *:*

UDP 210.12.169.206:123 *:*

UDP 210.12.169.206:88 *:*

UDP 210.12.169.206:137 *:*

UDP 210.12.169.206:138 *:*

UDP 210.12.169.206:389 *:*

UDP 210.12.169.206:464 *:*

 

Thanks.

Guest Meinolf Weber
Posted

Re: Windows 2003 W32TM connection to Time Server problem

 

Hello jon,

 

Is this DC the PDCEmulator? Have you changed the Operating ssytem and also

the PDCEmulator to another machine before?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

> Hi,

>

> We have a domain controller that has a problem syncronizing to an

> external time server. I tried almost all the solution posted in this

> forum and to other forum in the Internet and still it does not work.

>

> I also tried to use the command w32tm /unregister and w32tm /register

> to reset all registry entries for w32time service but still it can't

> connect to the time server.

>

> I look at the firewall and the policy allows udp 123 to the time

> server and their are no logs coming from my DC on udp port 123 going

> to the time server. I used ethereal to captured the packet when I

> command w32tm /resync, but I could not see any udp 123 request going

> to my time server.

>

> On the DC, I command

>

> C:\WINDOWS>w32tm /resync

> Sending resync command to local computer...

> The computer did not resync because no time data was available.

> c:\w32tm /monitor

> ICMMADB.DOMAIN.COM *** PDC ***

> ICMP: 0ms delay.

> NTP: error WSAECONNRESET - no server listening on NTP port

> C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5

> The following arguments were unexpected: /computer:icmtnzaw5

> Exiting with error 0x80070057

> To add up to my problem, there is no events log on Windows event

> viewer, the last w32time log that I had was last sept 29, 2007 @

> 4:10:49 PM.

>

> Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM

> The time service has not synchronized the system time for 86400

> seconds

> because none of the time service providers provided a usable time

> stamp. The

> time service is no longer synchronized and cannot provide the time to

> other

> clients or update the system clock. Monitor the system events

> displayed in

> the Event Viewer to make sure that a more serious problem does not

> exist.

> I activate the debug log of w32time, hope you can better analyze the

> problem.

> w32tm.log

> 148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update

> 148579 01:42:45.2656250s - W32TmServiceMain: Param change notification

> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':

> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

> 148579 01:42:45.2656250s - ReadConfig:

> 'DllName'='C:\WINDOWS\system32\w32time.dll'

> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001

> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':

> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

> 148579 01:42:45.2656250s - ReadConfig:

> 'DllName'='C:\WINDOWS\system32\w32time.dll'

> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000

> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider

> 'NtpClient':

> 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000

> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider

> 'NtpServer':

> 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000

> 148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

> 148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530

> 148579 01:42:45.2656250s - ReadConfig:

> 'FrequencyCorrectRate'=0x00000004

> 148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005

> 148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800

> 148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

> 148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005

> 148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A

> 148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F

> 148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A

> 148579 01:42:45.2656250s - ReadConfig:

> 'LocalClockDispersion'=0x0000000A

> 148579 01:42:45.2656250s - ReadConfig:

> 'MaxNegPhaseCorrection'=0x0000D2F0

> 148579 01:42:45.2656250s - ReadConfig:

> 'MaxPosPhaseCorrection'=0x0000D2F0

> 148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002

> 148579 01:42:45.2656250s - ReadConfig:

> 'MaxAllowedPhaseOffset'=0x0000012C

> 148579 01:42:45.2656250s - ReadConfig: failed. Use default one

> 'TimeJumpAuditOffset'=0x00007080

> 148579 01:42:45.2656250s - No params changed for local clock.

> 148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0

> not

> changed.

> 148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s

> 148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update

> 148579 01:47:47.6406250s - W32TmServiceMain: Param change notification

> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':

> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

> 148579 01:47:47.6406250s - ReadConfig:

> 'DllName'='C:\WINDOWS\system32\w32time.dll'

> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001

> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':

> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

> 148579 01:47:47.6406250s - ReadConfig:

> 'DllName'='C:\WINDOWS\system32\w32time.dll'

> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000

> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider

> 'NtpClient':

> 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000

> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider

> 'NtpServer':

> 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000

> 148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

> 148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530

> 148579 01:47:47.6406250s - ReadConfig:

> 'FrequencyCorrectRate'=0x00000004

> 148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005

> 148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800

> 148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

> 148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005

> 148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A

> 148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F

> 148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A

> 148579 01:47:47.6406250s - ReadConfig:

> 'LocalClockDispersion'=0x0000000A

> 148579 01:47:47.6406250s - ReadConfig:

> 'MaxNegPhaseCorrection'=0x0000D2F0

> 148579 01:47:47.6406250s - ReadConfig:

> 'MaxPosPhaseCorrection'=0x0000D2F0

> 148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002

> 148579 01:47:47.6406250s - ReadConfig:

> 'MaxAllowedPhaseOffset'=0x0000012C

> 148579 01:47:47.6406250s - ReadConfig: failed. Use default one

> 'TimeJumpAuditOffset'=0x00007080

> 148579 01:47:47.6406250s - No params changed for local clock.

> 148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0

> not

> changed.

> 148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s

> 148579 01:51:33.6250000s - W32TmServiceMain: timeout

> 148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s

> 148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin

> (S-1-5-21-2000478354-362288127-839522115-500)

> 148579 01:52:47.0156250s - RPC Call - HardResync

> 148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip

> Notification **********

> 148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -

> ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0

> RDs:100000000

> TSF:0x0

> 148579 01:52:47.0156250s - ClockDispln: we're a reliable time service

> with

> no time source: LS: 0, TN: 864000000000, WAIT: 86400000

> 148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s

> (1024.000s)

> 148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update

> 148579 01:52:49.8750000s - W32TmServiceMain: Param change notification

> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':

> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

> 148579 01:52:49.8750000s - ReadConfig:

> 'DllName'='C:\WINDOWS\system32\w32time.dll'

> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001

> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':

> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

> 148579 01:52:49.8750000s - ReadConfig:

> 'DllName'='C:\WINDOWS\system32\w32time.dll'

> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000

> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider

> 'NtpClient':

> 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000

> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider

> 'NtpServer':

> 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000

> 148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001

> 148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530

> 148579 01:52:49.8750000s - ReadConfig:

> 'FrequencyCorrectRate'=0x00000004

> 148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005

> 148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800

> 148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

> 148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005

> 148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A

> 148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F

> 148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A

> 148579 01:52:49.8750000s - ReadConfig:

> 'LocalClockDispersion'=0x0000000A

> 148579 01:52:49.8750000s - ReadConfig:

> 'MaxNegPhaseCorrection'=0x0000D2F0

> 148579 01:52:49.8750000s - ReadConfig:

> 'MaxPosPhaseCorrection'=0x0000D2F0

> 148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002

> 148579 01:52:49.8750000s - ReadConfig:

> 'MaxAllowedPhaseOffset'=0x0000012C

> 148579 01:52:49.8750000s - ReadConfig: failed. Use default one

> 'TimeJumpAuditOffset'=0x00007080

> 148579 01:52:49.8750000s - No params changed for local clock.

> 148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0

> not

> changed.

> 148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s

> (1021.140s)

> 148579 01:53:03.0312500s - W32TmServiceMain: timeout

> 148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s

> *********************************************************

>

> Domain Controller W32time Registry entries Windows Registry Editor

> Version 5.00

>

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]

> "Type"=dword:00000020

> "Start"=dword:00000002

> "ErrorControl"=dword:00000001

> "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,

> 00,6f,00,\

>

> 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,0

> 0,73,\

>

> 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2

> d,00,\

>

> 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,0

> 0,63,\

> 00,65,00,00,00

> "DisplayName"="Windows Time"

> "ObjectName"="NT AUTHORITY\\LocalService"

> "Description"="Maintains date and time synchronization on all clients

> and

> servers in the network. If this service is stopped, date and time

> synchronization will be unavailable. If this service is disabled, any

> services that explicitly depend on it will fail to start."

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]

> "LastClockRate"=dword:0002625a

> "MinClockRate"=dword:000260d4

> "MaxClockRate"=dword:000263e0

> "FrequencyCorrectRate"=dword:00000004

> "PollAdjustFactor"=dword:00000005

> "LargePhaseOffset"=dword:02faf080

> "SpikeWatchPeriod"=dword:00000384

> "HoldPeriod"=dword:00000005

> "LocalClockDispersion"=dword:0000000a

> "EventLogFlags"=dword:00000002

> "PhaseCorrectRate"=dword:00000007

> "MinPollInterval"=dword:00000006

> "MaxPollInterval"=dword:0000000a

> "MaxNegPhaseCorrection"=dword:ffffffff

> "MaxPosPhaseCorrection"=dword:ffffffff

> "UpdateInterval"=dword:00000064

> "AnnounceFlags"=dword:00000005

> "MaxAllowedPhaseOffset"=dword:0000012c

> "FileLogSize"=dword:00989680

> "FileLogName"="c:\\windows\\temp\\w32tm.log"

> "FileLogEntries"="0-116"

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Paramete

> rs]

> "ServiceMain"="SvchostEntry_W32Time"

> "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57

> ,00,53,\

>

> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,3

> 3,00,\

> 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00

> "Type"="NTP"

> "NtpServer"="timeserver,0x1"

>

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security

> ]

> "Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,0

> 0,00,02,\

>

> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,0

> 0,00,\

>

> 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,0

> 0,00,\

>

> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,0

> 0,00,\

>

> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,0

> 0,00,\

>

> 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,0

> 0,01,\

>

> 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,0

> 2,00,\

>

> 00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,0

> 0,00,\

> 01,01,00,00,00,00,00,05,12,00,00,00

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv

> iders]

>

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv

> iders\NtpClient]

> "Enabled"=dword:00000001

> "InputProvider"=dword:00000001

> "AllowNonstandardModeCombinations"=dword:00000001

> "CrossSiteSyncFlags"=dword:00000002

> "ResolvePeerBackoffMinutes"=dword:0000000f

> "ResolvePeerBackoffMaxTimes"=dword:00000007

> "CompatibilityFlags"=dword:80000000

> "EventLogFlags"=dword:00000001

> "LargeSampleSkew"=dword:00000003

> "DllName"="C:\\WINDOWS\\system32\\w32time.dll"

> "SpecialPollTimeRemaining"=hex(7):00,00

> "SpecialPollInterval"=dword:00000e10

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv

> iders\NtpServer]

> "InputProvider"=dword:00000000

> "AllowNonstandardModeCombinations"=dword:00000001

> "DllName"="C:\\WINDOWS\\system32\\w32time.dll"

> "Enabled"=dword:00000001

> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum]

> "0"="Root\\LEGACY_W32TIME\\0000"

> "Count"=dword:00000001

> "NextInstance"=dword:00000001

> C:\WINDOWS>netstat -an (Time Server)

>

> Active Connections

>

> Proto Local Address Foreign Address State

> *

> *

> UDP 0.0.0.0:161 *:*

> UDP 0.0.0.0:445 *:*

> UDP 0.0.0.0:500 *:*

> UDP 0.0.0.0:1029 *:*

> UDP 0.0.0.0:1051 *:*

> UDP 0.0.0.0:1052 *:*

> UDP 0.0.0.0:1065 *:*

> UDP 0.0.0.0:1655 *:*

> UDP 0.0.0.0:2967 *:*

> UDP 0.0.0.0:4500 *:*

> UDP 0.0.0.0:5632 *:*

> UDP 127.0.0.1:123 *:*

> UDP 127.0.0.1:1027 *:*

> UDP 127.0.0.1:1038 *:*

> UDP 127.0.0.1:1050 *:*

> UDP 127.0.0.1:1056 *:*

> UDP 127.0.0.1:1070 *:*

> UDP 127.0.0.1:1155 *:*

> UDP 127.0.0.1:1158 *:*

> UDP 127.0.0.1:2262 *:*

> UDP 210.12.169.206:123 *:*

> UDP 210.12.169.206:88 *:*

> UDP 210.12.169.206:137 *:*

> UDP 210.12.169.206:138 *:*

> UDP 210.12.169.206:389 *:*

> UDP 210.12.169.206:464 *:*

> Thanks.

>

  • 2 weeks later...
Guest jon mateo
Posted

Re: Windows 2003 W32TM connection to Time Server problem

 

Hi Meinolf,

 

Yes, this is the PDC Emulator. I haven't tried re-installing the OS yet.

I'll try to change the PDCEmulator to another machine. I'll let you know what

will happen.

 

Cheers,

 

Jon

 

"Meinolf Weber" wrote:

> Hello jon,

>

> Is this DC the PDCEmulator? Have you changed the Operating ssytem and also

> the PDCEmulator to another machine before?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

>

> > Hi,

> >

> > We have a domain controller that has a problem syncronizing to an

> > external time server. I tried almost all the solution posted in this

> > forum and to other forum in the Internet and still it does not work.

> >

> > I also tried to use the command w32tm /unregister and w32tm /register

> > to reset all registry entries for w32time service but still it can't

> > connect to the time server.

> >

> > I look at the firewall and the policy allows udp 123 to the time

> > server and their are no logs coming from my DC on udp port 123 going

> > to the time server. I used ethereal to captured the packet when I

> > command w32tm /resync, but I could not see any udp 123 request going

> > to my time server.

> >

> > On the DC, I command

> >

> > C:\WINDOWS>w32tm /resync

> > Sending resync command to local computer...

> > The computer did not resync because no time data was available.

> > c:\w32tm /monitor

> > ICMMADB.DOMAIN.COM *** PDC ***

> > ICMP: 0ms delay.

> > NTP: error WSAECONNRESET - no server listening on NTP port

> > C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5

> > The following arguments were unexpected: /computer:icmtnzaw5

> > Exiting with error 0x80070057

> > To add up to my problem, there is no events log on Windows event

> > viewer, the last w32time log that I had was last sept 29, 2007 @

> > 4:10:49 PM.

> >

> > Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM

> > The time service has not synchronized the system time for 86400

> > seconds

> > because none of the time service providers provided a usable time

> > stamp. The

> > time service is no longer synchronized and cannot provide the time to

> > other

> > clients or update the system clock. Monitor the system events

> > displayed in

> > the Event Viewer to make sure that a more serious problem does not

> > exist.

> > I activate the debug log of w32time, hope you can better analyze the

> > problem.

> > w32tm.log

> > 148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update

> > 148579 01:42:45.2656250s - W32TmServiceMain: Param change notification

> > 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':

> > 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'DllName'='C:\WINDOWS\system32\w32time.dll'

> > 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001

> > 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':

> > 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'DllName'='C:\WINDOWS\system32\w32time.dll'

> > 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000

> > 148579 01:42:45.2656250s - ReadConfig (policy): Found provider

> > 'NtpClient':

> > 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000

> > 148579 01:42:45.2656250s - ReadConfig (policy): Found provider

> > 'NtpServer':

> > 148579 01:42:45.2656250s - ReadConfig (policy): 'Enabled'=0x00000000

> > 148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

> > 148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'FrequencyCorrectRate'=0x00000004

> > 148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005

> > 148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800

> > 148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

> > 148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005

> > 148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A

> > 148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F

> > 148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'LocalClockDispersion'=0x0000000A

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'MaxNegPhaseCorrection'=0x0000D2F0

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'MaxPosPhaseCorrection'=0x0000D2F0

> > 148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002

> > 148579 01:42:45.2656250s - ReadConfig:

> > 'MaxAllowedPhaseOffset'=0x0000012C

> > 148579 01:42:45.2656250s - ReadConfig: failed. Use default one

> > 'TimeJumpAuditOffset'=0x00007080

> > 148579 01:42:45.2656250s - No params changed for local clock.

> > 148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0

> > not

> > changed.

> > 148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s

> > 148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update

> > 148579 01:47:47.6406250s - W32TmServiceMain: Param change notification

> > 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':

> > 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'DllName'='C:\WINDOWS\system32\w32time.dll'

> > 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001

> > 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':

> > 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'DllName'='C:\WINDOWS\system32\w32time.dll'

> > 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000

> > 148579 01:47:47.6406250s - ReadConfig (policy): Found provider

> > 'NtpClient':

> > 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000

> > 148579 01:47:47.6406250s - ReadConfig (policy): Found provider

> > 'NtpServer':

> > 148579 01:47:47.6406250s - ReadConfig (policy): 'Enabled'=0x00000000

> > 148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

> > 148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'FrequencyCorrectRate'=0x00000004

> > 148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005

> > 148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800

> > 148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

> > 148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005

> > 148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A

> > 148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F

> > 148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'LocalClockDispersion'=0x0000000A

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'MaxNegPhaseCorrection'=0x0000D2F0

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'MaxPosPhaseCorrection'=0x0000D2F0

> > 148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002

> > 148579 01:47:47.6406250s - ReadConfig:

> > 'MaxAllowedPhaseOffset'=0x0000012C

> > 148579 01:47:47.6406250s - ReadConfig: failed. Use default one

> > 'TimeJumpAuditOffset'=0x00007080

> > 148579 01:47:47.6406250s - No params changed for local clock.

> > 148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0

> > not

> > changed.

> > 148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s

> > 148579 01:51:33.6250000s - W32TmServiceMain: timeout

> > 148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s

> > 148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin

> > (S-1-5-21-2000478354-362288127-839522115-500)

> > 148579 01:52:47.0156250s - RPC Call - HardResync

> > 148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip

> > Notification **********

> > 148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -

> > ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0

> > RDs:100000000

> > TSF:0x0

> > 148579 01:52:47.0156250s - ClockDispln: we're a reliable time service

> > with

> > no time source: LS: 0, TN: 864000000000, WAIT: 86400000

> > 148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s

> > (1024.000s)

> > 148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update

> > 148579 01:52:49.8750000s - W32TmServiceMain: Param change notification

> > 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':

> > 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'DllName'='C:\WINDOWS\system32\w32time.dll'

> > 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001

> > 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':

> > 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'DllName'='C:\WINDOWS\system32\w32time.dll'

> > 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000

> > 148579 01:52:49.8750000s - ReadConfig (policy): Found provider

> > 'NtpClient':

> > 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000

> > 148579 01:52:49.8750000s - ReadConfig (policy): Found provider

> > 'NtpServer':

> > 148579 01:52:49.8750000s - ReadConfig (policy): 'Enabled'=0x00000000

> > 148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001

> > 148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'FrequencyCorrectRate'=0x00000004

> > 148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005

> > 148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800

> > 148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

> > 148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005

> > 148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A

> > 148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F

> > 148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'LocalClockDispersion'=0x0000000A

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'MaxNegPhaseCorrection'=0x0000D2F0

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'MaxPosPhaseCorrection'=0x0000D2F0

> > 148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002

> > 148579 01:52:49.8750000s - ReadConfig:

> > 'MaxAllowedPhaseOffset'=0x0000012C

> > 148579 01:52:49.8750000s - ReadConfig: failed. Use default one

> > 'TimeJumpAuditOffset'=0x00007080

> > 148579 01:52:49.8750000s - No params changed for local clock.

> > 148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0

> > not

> > changed.

> > 148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s

> > (1021.140s)

> > 148579 01:53:03.0312500s - W32TmServiceMain: timeout

> > 148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s

> > *********************************************************

> >

> > Domain Controller W32time Registry entries Windows Registry Editor

> > Version 5.00

> >

> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]

> > "Type"=dword:00000020

> > "Start"=dword:00000002

> > "ErrorControl"=dword:00000001

> > "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,

> > 00,6f,00,\

> >

> > 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,0

> > 0,73,\

> >

> > 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2

> > d,00,\

> >

> > 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69,0

> > 0,63,\

> > 00,65,00,00,00

> > "DisplayName"="Windows Time"

> > "ObjectName"="NT AUTHORITY\\LocalService"

> > "Description"="Maintains date and time synchronization on all clients

> > and

> > servers in the network. If this service is stopped, date and time

> > synchronization will be unavailable. If this service is disabled, any

> > services that explicitly depend on it will fail to start."

> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config]

> > "LastClockRate"=dword:0002625a

> > "MinClockRate"=dword:000260d4

> > "MaxClockRate"=dword:000263e0

> > "FrequencyCorrectRate"=dword:00000004

> > "PollAdjustFactor"=dword:00000005

> > "LargePhaseOffset"=dword:02faf080

> > "SpikeWatchPeriod"=dword:00000384

> > "HoldPeriod"=dword:00000005

> > "LocalClockDispersion"=dword:0000000a

> > "EventLogFlags"=dword:00000002

> > "PhaseCorrectRate"=dword:00000007

> > "MinPollInterval"=dword:00000006

> > "MaxPollInterval"=dword:0000000a

> > "MaxNegPhaseCorrection"=dword:ffffffff

> > "MaxPosPhaseCorrection"=dword:ffffffff

> > "UpdateInterval"=dword:00000064

> > "AnnounceFlags"=dword:00000005

> > "MaxAllowedPhaseOffset"=dword:0000012c

> > "FileLogSize"=dword:00989680

> > "FileLogName"="c:\\windows\\temp\\w32tm.log"

> > "FileLogEntries"="0-116"

> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Paramete

> > rs]

> > "ServiceMain"="SvchostEntry_W32Time"

> > "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57

> > ,00,53,\

> >

> > 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00,3

> > 3,00,\

> > 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00

> > "Type"="NTP"

> > "NtpServer"="timeserver,0x1"

> >

> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security

> > ]

> > "Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,0

> > 0,00,02,\

> >

> > 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,0

> > 0,00,\

> >

> > 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,0

> > 0,00,\

> >

> > 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,0

> > 0,00,\

> >

> > 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00,0

> > 0,00,\

> >

> > 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00,0

> > 0,01,\

> >

> > 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,0

> > 2,00,\

> >

> > 00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00,0

> > 0,00,\

> > 01,01,00,00,00,00,00,05,12,00,00,00

> > [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProv

Guest Meinolf Weber
Posted

Re: Windows 2003 W32TM connection to Time Server problem

 

Hello jon,

 

I did not talk about reinstalling the Operating system. I meant if you have

upgraded from 2000 to 2003 for example.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> Hi Meinolf,

>

> Yes, this is the PDC Emulator. I haven't tried re-installing the OS

> yet. I'll try to change the PDCEmulator to another machine. I'll let

> you know what will happen.

>

> Cheers,

>

> Jon

>

> "Meinolf Weber" wrote:

>

>> Hello jon,

>>

>> Is this DC the PDCEmulator? Have you changed the Operating ssytem and

>> also the PDCEmulator to another machine before?

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers

>> no rights.

>>> Hi,

>>>

>>> We have a domain controller that has a problem syncronizing to an

>>> external time server. I tried almost all the solution posted in this

>>> forum and to other forum in the Internet and still it does not work.

>>>

>>> I also tried to use the command w32tm /unregister and w32tm

>>> /register to reset all registry entries for w32time service but

>>> still it can't connect to the time server.

>>>

>>> I look at the firewall and the policy allows udp 123 to the time

>>> server and their are no logs coming from my DC on udp port 123 going

>>> to the time server. I used ethereal to captured the packet when I

>>> command w32tm /resync, but I could not see any udp 123 request going

>>> to my time server.

>>>

>>> On the DC, I command

>>>

>>> C:\WINDOWS>w32tm /resync

>>> Sending resync command to local computer...

>>> The computer did not resync because no time data was available.

>>> c:\w32tm /monitor

>>> ICMMADB.DOMAIN.COM *** PDC ***

>>> ICMP: 0ms delay.

>>> NTP: error WSAECONNRESET - no server listening on NTP port

>>> C:\WINDOWS>w32tm /monitor /computer:icmtnzaw5

>>> The following arguments were unexpected: /computer:icmtnzaw5

>>> Exiting with error 0x80070057

>>> To add up to my problem, there is no events log on Windows event

>>> viewer, the last w32time log that I had was last sept 29, 2007 @

>>> 4:10:49 PM.

>>> Event id: 36 - Last received 9/29/2007 @ 4:10:49 PM

>>> The time service has not synchronized the system time for 86400

>>> seconds

>>> because none of the time service providers provided a usable time

>>> stamp. The

>>> time service is no longer synchronized and cannot provide the time

>>> to

>>> other

>>> clients or update the system clock. Monitor the system events

>>> displayed in

>>> the Event Viewer to make sure that a more serious problem does not

>>> exist.

>>> I activate the debug log of w32time, hope you can better analyze the

>>> problem.

>>> w32tm.log

>>> 148579 01:42:45.2656250s - W32TmServiceMain: Group Policy Update

>>> 148579 01:42:45.2656250s - W32TmServiceMain: Param change

>>> notification

>>> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpClient':

>>> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'

>>> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000001

>>> 148579 01:42:45.2656250s - ReadConfig: Found provider 'NtpServer':

>>> 148579 01:42:45.2656250s - ReadConfig: 'Enabled'=0x00000001

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'

>>> 148579 01:42:45.2656250s - ReadConfig: 'InputProvider'=0x00000000

>>> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider

>>> 'NtpClient':

>>> 148579 01:42:45.2656250s - ReadConfig (policy):

>>> 'Enabled'=0x00000000

>>> 148579 01:42:45.2656250s - ReadConfig (policy): Found provider

>>> 'NtpServer':

>>> 148579 01:42:45.2656250s - ReadConfig (policy):

>>> 'Enabled'=0x00000000

>>> 148579 01:42:45.2656250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

>>> 148579 01:42:45.2656250s - ReadConfig: 'UpdateInterval'=0x00007530

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'FrequencyCorrectRate'=0x00000004

>>> 148579 01:42:45.2656250s - ReadConfig: 'PollAdjustFactor'=0x00000005

>>> 148579 01:42:45.2656250s - ReadConfig: 'LargePhaseOffset'=0x00138800

>>> 148579 01:42:45.2656250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

>>> 148579 01:42:45.2656250s - ReadConfig: 'HoldPeriod'=0x00000005

>>> 148579 01:42:45.2656250s - ReadConfig: 'MinPollInterval'=0x0000000A

>>> 148579 01:42:45.2656250s - ReadConfig: 'MaxPollInterval'=0x0000000F

>>> 148579 01:42:45.2656250s - ReadConfig: 'AnnounceFlags'=0x0000000A

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'LocalClockDispersion'=0x0000000A

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'MaxNegPhaseCorrection'=0x0000D2F0

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'MaxPosPhaseCorrection'=0x0000D2F0

>>> 148579 01:42:45.2656250s - ReadConfig: 'EventLogFlags'=0x00000002

>>> 148579 01:42:45.2656250s - ReadConfig:

>>> 'MaxAllowedPhaseOffset'=0x0000012C

>>> 148579 01:42:45.2656250s - ReadConfig: failed. Use default one

>>> 'TimeJumpAuditOffset'=0x00007080

>>> 148579 01:42:45.2656250s - No params changed for local clock.

>>> 148579 01:42:45.2656250s - Provider list: 0 stopped, 0 started, 0

>>> not

>>> changed.

>>> 148579 01:42:45.2656250s - W32TmServiceMain: waiting 528.359s

>>> 148579 01:47:47.6406250s - W32TmServiceMain: Group Policy Update

>>> 148579 01:47:47.6406250s - W32TmServiceMain: Param change

>>> notification

>>> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpClient':

>>> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'

>>> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000001

>>> 148579 01:47:47.6406250s - ReadConfig: Found provider 'NtpServer':

>>> 148579 01:47:47.6406250s - ReadConfig: 'Enabled'=0x00000001

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'

>>> 148579 01:47:47.6406250s - ReadConfig: 'InputProvider'=0x00000000

>>> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider

>>> 'NtpClient':

>>> 148579 01:47:47.6406250s - ReadConfig (policy):

>>> 'Enabled'=0x00000000

>>> 148579 01:47:47.6406250s - ReadConfig (policy): Found provider

>>> 'NtpServer':

>>> 148579 01:47:47.6406250s - ReadConfig (policy):

>>> 'Enabled'=0x00000000

>>> 148579 01:47:47.6406250s - ReadConfig: 'PhaseCorrectRate'=0x00000001

>>> 148579 01:47:47.6406250s - ReadConfig: 'UpdateInterval'=0x00007530

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'FrequencyCorrectRate'=0x00000004

>>> 148579 01:47:47.6406250s - ReadConfig: 'PollAdjustFactor'=0x00000005

>>> 148579 01:47:47.6406250s - ReadConfig: 'LargePhaseOffset'=0x00138800

>>> 148579 01:47:47.6406250s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

>>> 148579 01:47:47.6406250s - ReadConfig: 'HoldPeriod'=0x00000005

>>> 148579 01:47:47.6406250s - ReadConfig: 'MinPollInterval'=0x0000000A

>>> 148579 01:47:47.6406250s - ReadConfig: 'MaxPollInterval'=0x0000000F

>>> 148579 01:47:47.6406250s - ReadConfig: 'AnnounceFlags'=0x0000000A

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'LocalClockDispersion'=0x0000000A

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'MaxNegPhaseCorrection'=0x0000D2F0

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'MaxPosPhaseCorrection'=0x0000D2F0

>>> 148579 01:47:47.6406250s - ReadConfig: 'EventLogFlags'=0x00000002

>>> 148579 01:47:47.6406250s - ReadConfig:

>>> 'MaxAllowedPhaseOffset'=0x0000012C

>>> 148579 01:47:47.6406250s - ReadConfig: failed. Use default one

>>> 'TimeJumpAuditOffset'=0x00007080

>>> 148579 01:47:47.6406250s - No params changed for local clock.

>>> 148579 01:47:47.6406250s - Provider list: 0 stopped, 0 started, 0

>>> not

>>> changed.

>>> 148579 01:47:47.6406250s - W32TmServiceMain: waiting 225.984s

>>> 148579 01:51:33.6250000s - W32TmServiceMain: timeout

>>> 148579 01:51:33.6250000s - W32TmServiceMain: waiting 1024.000s

>>> 148579 01:52:47.0156250s - RPC Caller is TNZMODEL\icmadmin

>>> (S-1-5-21-2000478354-362288127-839522115-500)

>>> 148579 01:52:47.0156250s - RPC Call - HardResync

>>> 148579 01:52:47.0156250s - W32TmServiceMain: ********** Time Slip

>>> Notification **********

>>> 148579 01:52:47.0156250s - ClockDispln:148579 01:52:47.0156250s -

>>> ClockDispln TimeSlip:148579 01:52:47.0156250s - LI:0 S:1 RDl:0

>>> RDs:100000000

>>> TSF:0x0

>>> 148579 01:52:47.0156250s - ClockDispln: we're a reliable time

>>> service

>>> with

>>> no time source: LS: 0, TN: 864000000000, WAIT: 86400000

>>> 148579 01:52:47.0156250s - W32TmServiceMain: waiting i16.000s

>>> (1024.000s)

>>> 148579 01:52:49.8750000s - W32TmServiceMain: Group Policy Update

>>> 148579 01:52:49.8750000s - W32TmServiceMain: Param change

>>> notification

>>> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpClient':

>>> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'

>>> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000001

>>> 148579 01:52:49.8750000s - ReadConfig: Found provider 'NtpServer':

>>> 148579 01:52:49.8750000s - ReadConfig: 'Enabled'=0x00000001

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'DllName'='C:\WINDOWS\system32\w32time.dll'

>>> 148579 01:52:49.8750000s - ReadConfig: 'InputProvider'=0x00000000

>>> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider

>>> 'NtpClient':

>>> 148579 01:52:49.8750000s - ReadConfig (policy):

>>> 'Enabled'=0x00000000

>>> 148579 01:52:49.8750000s - ReadConfig (policy): Found provider

>>> 'NtpServer':

>>> 148579 01:52:49.8750000s - ReadConfig (policy):

>>> 'Enabled'=0x00000000

>>> 148579 01:52:49.8750000s - ReadConfig: 'PhaseCorrectRate'=0x00000001

>>> 148579 01:52:49.8750000s - ReadConfig: 'UpdateInterval'=0x00007530

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'FrequencyCorrectRate'=0x00000004

>>> 148579 01:52:49.8750000s - ReadConfig: 'PollAdjustFactor'=0x00000005

>>> 148579 01:52:49.8750000s - ReadConfig: 'LargePhaseOffset'=0x00138800

>>> 148579 01:52:49.8750000s - ReadConfig: 'SpikeWatchPeriod'=0x0000005A

>>> 148579 01:52:49.8750000s - ReadConfig: 'HoldPeriod'=0x00000005

>>> 148579 01:52:49.8750000s - ReadConfig: 'MinPollInterval'=0x0000000A

>>> 148579 01:52:49.8750000s - ReadConfig: 'MaxPollInterval'=0x0000000F

>>> 148579 01:52:49.8750000s - ReadConfig: 'AnnounceFlags'=0x0000000A

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'LocalClockDispersion'=0x0000000A

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'MaxNegPhaseCorrection'=0x0000D2F0

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'MaxPosPhaseCorrection'=0x0000D2F0

>>> 148579 01:52:49.8750000s - ReadConfig: 'EventLogFlags'=0x00000002

>>> 148579 01:52:49.8750000s - ReadConfig:

>>> 'MaxAllowedPhaseOffset'=0x0000012C

>>> 148579 01:52:49.8750000s - ReadConfig: failed. Use default one

>>> 'TimeJumpAuditOffset'=0x00007080

>>> 148579 01:52:49.8750000s - No params changed for local clock.

>>> 148579 01:52:49.8750000s - Provider list: 0 stopped, 0 started, 0

>>> not

>>> changed.

>>> 148579 01:52:49.8750000s - W32TmServiceMain: waiting i13.140s

>>> (1021.140s)

>>> 148579 01:53:03.0312500s - W32TmServiceMain: timeout

>>> 148579 01:53:03.0312500s - W32TmServiceMain: waiting 1024.000s

>>> *********************************************************

>>> Domain Controller W32time Registry entries Windows Registry Editor

>>> Version 5.00

>>>

>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time]

>>> "Type"=dword:00000020

>>> "Start"=dword:00000002

>>> "ErrorControl"=dword:00000001

>>> "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6

>>> f,

>>> 00,6f,00,\

>>> 74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c

>>> ,0 0,73,\

>>>

>>> 00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00

>>> ,2 d,00,\

>>>

>>> 6b,00,20,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,00,72,00,76,00,69

>>> ,0

>>> 0,63,\

>>> 00,65,00,00,00

>>> "DisplayName"="Windows Time"

>>> "ObjectName"="NT AUTHORITY\\LocalService"

>>> "Description"="Maintains date and time synchronization on all

>>> clients

>>> and

>>> servers in the network. If this service is stopped, date and time

>>> synchronization will be unavailable. If this service is disabled,

>>> any

>>> services that explicitly depend on it will fail to start."

>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config

>>> ]

>>> "LastClockRate"=dword:0002625a

>>> "MinClockRate"=dword:000260d4

>>> "MaxClockRate"=dword:000263e0

>>> "FrequencyCorrectRate"=dword:00000004

>>> "PollAdjustFactor"=dword:00000005

>>> "LargePhaseOffset"=dword:02faf080

>>> "SpikeWatchPeriod"=dword:00000384

>>> "HoldPeriod"=dword:00000005

>>> "LocalClockDispersion"=dword:0000000a

>>> "EventLogFlags"=dword:00000002

>>> "PhaseCorrectRate"=dword:00000007

>>> "MinPollInterval"=dword:00000006

>>> "MaxPollInterval"=dword:0000000a

>>> "MaxNegPhaseCorrection"=dword:ffffffff

>>> "MaxPosPhaseCorrection"=dword:ffffffff

>>> "UpdateInterval"=dword:00000064

>>> "AnnounceFlags"=dword:00000005

>>> "MaxAllowedPhaseOffset"=dword:0000012c

>>> "FileLogSize"=dword:00989680

>>> "FileLogName"="c:\\windows\\temp\\w32tm.log"

>>> "FileLogEntries"="0-116"

>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parame

>>> te

>>> rs]

>>> "ServiceMain"="SvchostEntry_W32Time"

>>> "ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,

>>> 57

>>> ,00,53,\

>>> 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,77,00

>>> ,3

>>> 3,00,\

>>> 32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00

>>> "Type"="NTP"

>>> "NtpServer"="timeserver,0x1"

>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Securi

>>> ty ]

>>> "Security"=hex:01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00

>>> ,0 0,00,02,\

>>>

>>> 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01

>>> ,0 0,00,\

>>>

>>> 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00

>>> ,0 0,00,\

>>>

>>> 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00

>>> ,0 0,00,\

>>>

>>> 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,04,00,00

>>> ,0 0,00,\

>>>

>>> 00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,06,00,00,00,00,00,14,00

>>> ,0 0,01,\

>>>

>>> 00,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01

>>> ,0 2,00,\

>>>

>>> 00,00,00,00,05,20,00,00,00,25,02,00,00,01,01,00,00,00,00,00,05,12,00

>>> ,0

>>> 0,00,\

>>> 01,01,00,00,00,00,00,05,12,00,00,00

>>> [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimePr

>>> ov

×
×
  • Create New...