This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 66%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Hi,
In have a unique problem in Windows Embedded 7 standard. The time goes back or forward by 1 hrs randomly.
The system is not connected to the internet. It runs a dedicated application, which controls a lab instrument's hardware.
The Event Viewer shows the time change, some times the Kernel General IS 1 shows the time changed in few micro seconds.
The Event viewer log is it stored sequential ?
If yes the in some service like the "Event Log" the time does not match e.g.
Some times its offset by some minutes.
The below table I have copied from the Event Viewer without sorting for time
Information 14-12-2020 10:51:51 Kernel-General 13 None
Information 14-12-2020 10:51:48 Service Control Manager 7036 None
Information 14-12-2020 10:47:24 EventLog 6013 None
Information 14-12-2020 10:47:24 EventLog 6005 None
Information 14-12-2020 10:47:24 EventLog 6009 None
Information 14-12-2020 10:51:48 Kernel-Power 109 (103)
Information 14-12-2020 10:51:45 Service Control Manager 7036 None
As you can see from the table the Event "EventLog" is 4 min offset.
At times the offset is in hours.
Why does this happen.
Is the image setup to use the CMOS clock as the time source?
Hi, Sean,
The image is setup for the CMOS clock as I am not getting this problem in my other production units.
At the present its happening in 4 systems. So not able to figure out if the RTC has gone bad or what is causing the problem.
Randomly the time changes. I have checked the CMOS time and it matches with the system time.
Motherboard kept On for 12 hrs in BIOS menu Time change is not observed.
The CMOS battery voltage is also proper.
I would like to know how the Event Viewer log is written ??
multiple processes are writing to one event log, is it possible that one of the processes wrote it later hence the discrepancy in the time?
Information 14-12-2020 10:47:10 Kernel-General 1 None The system time has changed
NewTime 2020-12-14T05:17:10.5000000Z
OldTime 2020-12-14T06:17:10.5027231Z
change in time here is in micro seconds.
So I am not able to figure out if there is a RTC problem or OS ???
Regards
Prasanna
Might double check the sort column. Look for the ⋁⋀ caret at the top of column, or also try Action\Properties\General\Restore Defaults
--please don't forget to Accept as answer if the reply is helpful--
HI Patrick
I would like to know how the Event Viewer log is written ??
multiple processes are writing to one event log, is it possible that one of the processes wrote it later hence the discrepancy in the time?
I dont want to sort the Time, but how did it happen or got logged in real time.
Information 14-12-2020 10:51:51 Kernel-General 13 None
Information 14-12-2020 10:51:48 Service Control Manager 7036 None
Information 14-12-2020 10:47:24 EventLog 6013 None
Information 14-12-2020 10:47:24 EventLog 6005 None
Information 14-12-2020 10:47:24 EventLog 6009 None
Information 14-12-2020 10:51:48 Kernel-Power 109 (103)
Information 14-12-2020 10:51:45 Service Control Manager 7036 None
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 26%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Hi Prasanna,
I am assuming write-filters are enabled on the system. Please try by configuring the system so that the CMOS clock is in UTC and not the local-time. I think that will resolve the issue. Please check and confirm if that worked.
In order to configure the system so that the CMOS clock is in UTC, first disable the write-filters, restart the system and then create the following registry key and set the DWORD value to 1:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation\RealTimeIsUniversal
Enable Write-Filters again
Restart the system
See if the issue is resolved?
HI,
I have around 300 units installed in India I am facing this problem in 4 machines where the time goes back.
UTC or local time it should increment not change randomly.
The is no application changing the time so I am not able to understand if it is hardware RTC probelem or software OS related.
Regards
Prasanna
If the time is not effecting anything else in the system, this might be a cache or threading issue when the event is actually written to the log, which would make this an interesting non-issue.
I would look at the Windows Internals books for more information on even log operation.
Hi Sean,
The system is based on Intel Atom board and Windows Embedded Standard 7. Its a Lab instrument where the single Application controls the instrument.
The Application controls multiple valves, motors, optical readings in the instrument so the problem we are facing is when the time changes. The sequence and the data acquired against time gets garbled up.
The system is not connected to the network so the time setting from web site is not a possibility.
I have checked the RTC battery its working fine in our LAB. We have kept the machine on without running the application, we did find the time change.
also scanned for anti virus but found none.
The time changing is quite random.
thanks
Regards
Prasanna
Hi Sean,
I have now tried Windows 7 Pro for testing this Event Viewer issue.
I got the following in the Event Viewer.
I am attaching the File for your reference.
In this the log has skipped days in the sequence.
I am not able to understand is it RTC or its Event Viewer logging issue.57593-eventdata.pdf
thanks
Prasanna
Days! That is not right. I recommend contacting Microsoft support directly to get an answer.