question

KyleHaviland-2901 avatar image
0 Votes"
KyleHaviland-2901 asked DSPatrick edited

Domain Time is Fast

My time runs fast by 4 minutes. I've tried changing to a government time server. It doesn't change. How do I fix it?

C:\Users\Administrator.WSCHD>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 1 (primary reference - syncd by radio clock)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0000000s
Root Dispersion: 10.0000000s
ReferenceId: 0x4C4F434C (source name: "LOCL")
Last Successful Sync Time: 5/18/2021 8:44:16 AM
Source: Local CMOS Clock
Poll Interval: 6 (64s)


C:\Users\Administrator.WSCHD>w32tm /query /configuration
[Configuration]

EventLogFlags: 2 (Local)
AnnounceFlags: 10 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 172800 (Local)
MaxPosPhaseCorrection: 172800 (Local)
MaxAllowedPhaseOffset: 300 (Local)

FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)


[TimeProviders]

NtpClient (Local)
DllName: C:\Windows\SYSTEM32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
CrossSiteSyncFlags: 2 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Local)
ResolvePeerBackoffMaxTimes: 7 (Local)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 1 (Local)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Local)
Type: NT5DS (Local)

NtpServer (Local)
DllName: C:\Windows\SYSTEM32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)

VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)

C:\Users\Administrator.WSCHD>w32tm /stripchart /computer:time.windows.com /dataonly
Tracking time.windows.com [40.119.6.228:123].
The current time is 5/18/2021 9:24:18 AM.
09:24:18, -262.7220698s
09:24:20, -262.7264162s
09:24:22, -262.7307705s
09:24:24, -262.7233308s

C:\Users\Administrator.WSCHD>w32tm /config /manualpeerlist:time.windows.com /syncfromflags:MANUAL
The command completed successfully.

C:\Users\Administrator.WSCHD>w32tm /config /update
The command completed successfully.

C:\Users\Administrator.WSCHD>w32tm /resync
Sending resync command to local computer
The command completed successfully.

C:\Users\Administrator.WSCHD>w32tm /stripchart /computer:time.windows.com /dataonly
Tracking time.windows.com [40.119.6.228:123].
The current time is 5/18/2021 9:25:39 AM.
09:25:39, -262.6665133s
09:25:41, -262.6558668s
09:25:43, -262.6557630s
09:25:45, -262.6414714s

Still 4 minutes off....

windows-server-2016
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick edited

Ok, some new information. You can uncheck this one, then via PowerShell confirm. May want to reboot after making changes.

97627-image.png




--please don't forget to Accept as answer if the reply is helpful--






image.png (96.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Assuming this is the PDC emulator you could;

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /manualpeerlist:<ntp ip address> /syncfromflags:manual /reliable:yes /update
net stop w32time
net start w32time
then check
w32tm /query /source
w32tm /query /configuration

https://tf.nist.gov/tf-cgi/servers.cgi

--please don't forget to Accept as answer if the reply is helpful--










5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KyleHaviland-2901 avatar image
0 Votes"
KyleHaviland-2901 answered KyleHaviland-2901 published

Unfortunately, time is still off four minutes.


C:\Users\Administrator.WSCHD>w32tm /unregister
W32Time successfully unregistered.

C:\Users\Administrator.WSCHD>net stop w32time
The Windows Time service is stopping.The service name is invalid.

More help is available by typing NET HELPMSG 2185.

C:\Users\Administrator.WSCHD>w32tm /register
W32Time successfully registered.

C:\Users\Administrator.WSCHD>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.

C:\Users\Administrator.WSCHD>w32tm /config /manualpeerlist:time-d-g.nist.gov /syncfromflags:manual /reiable:yes /update
The following arguments were unexpected:
/reiable:yes

C:\Users\Administrator.WSCHD>w32tm /config /manualpeerlist:"time-d-g.nist.gov" /syncfromflags:manual /reiable:yes /update
The following arguments were unexpected:
/reiable:yes

C:\Users\Administrator.WSCHD>w32tm /config /manualpeerlist:"time-d-g.nist.gov" /syncfromflags:manual /reliable:yes /update
The command completed successfully.

C:\Users\Administrator.WSCHD>net stop w32time
The Windows Time service is stopping.
The Windows Time service was stopped successfully.

C:\Users\Administrator.WSCHD>net start w32time
The Windows Time service is starting.
The Windows Time service was started successfully.

C:\Users\Administrator.WSCHD>w32time /query /source
'w32time' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\Administrator.WSCHD>w32tm /query /source
time-d-g.nist.gov

C:\Users\Administrator.WSCHD>w32tm /query /configuration
[Configuration]

EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 172800 (Local)
MaxPosPhaseCorrection: 172800 (Local)
MaxAllowedPhaseOffset: 300 (Local)

FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)

[TimeProviders]

NtpClient (Local)
DllName: C:\Windows\SYSTEM32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Local)
ResolvePeerBackoffMaxTimes: 7 (Local)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 1 (Local)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Local)
Type: NTP (Local)
NtpServer: time-d-g.nist.gov (Local)

NtpServer (Local)
DllName: C:\Windows\SYSTEM32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)

VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)

C:\Users\Administrator.WSCHD>w32tm /config /update
The command completed successfully.

C:\Users\Administrator.WSCHD>w32tm /resync
Sending resync command to local computer
The command completed successfully.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

May need to be patient. Read on here about possible correction algorithm.
https://docs.microsoft.com/en-us/windows-server/networking/windows-time-service/windows-time-service-tools-and-settings#configure-computer-clock-reset

--please don't forget to Accept as answer if the reply is helpful--










5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KyleHaviland-2901 avatar image
0 Votes"
KyleHaviland-2901 answered KyleHaviland-2901 edited

I did the above last Friday. The time still is not accurate. Is there anyway to force a negative offset?

I'm currently doing all of the above on the domain controller. Have run gpudate and am still experiencing fast time.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Might filter the System event log for Time-Service events to see what is happening

--please don't forget to Accept as answer if the reply is helpful--






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KyleHaviland-2901 avatar image
0 Votes"
KyleHaviland-2901 answered

There is only one warning.

Event id 50 posted 7 minutes ago.

The time service detected a time difference of greater than 5000 milliseconds for 900 seconds. The time difference might be caused by synchronization with low-accuracy time sources or by suboptimal network conditions. The time service is no longer synchronized and cannot provide the time to other clients or update the system clock. When a valid time stamp is received from a time service provider, the time service will correct itself.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

I'd look for other events but it may be something is blocking access to the external NTP server.

--please don't forget to Accept as answer if the reply is helpful--


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KyleHaviland-2901 avatar image
0 Votes"
KyleHaviland-2901 answered

Is there a way to ping the time results on the time server in realtime?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

You can do w32tm /stripchart /computer:time.windows.com but I pulled my hair out for a while with this some time back to find it using dynamic ports. Doing a network trace I found the ISP was block outbound port 123 UDP So save yourself some time by trying some other NTP server or do the network capture.
https://tf.nist.gov/tf-cgi/servers.cgi


--please don't forget to Accept as answer if the reply is helpful--




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.