List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Change Time on DC

Prev Next

You are not authorized to post a reply.

Author

Messages

mnagc

Posts:17

06/09/2010 11:12 AM
Hi All, We have PDC & ADC (both W2K3R2SP2x64) running since more than 2 years now exist 900+ users. Off late one of our in-house built application (Passenger Dispatch System) uses date & time from Local system. DC's time is currently 6 mins behind from actual time. Does changing the DC's time affects users..? what about end-user do we need to change the time in all PC's also. thanks regs

neil.ruston@credit-suisse.com User is Offline

Posts:0

06/09/2010 11:38 AM
A good article explaining how time sync works in an AD environment can be found here: http://technet.microsoft.com/en-us/library/cc773013(WS.10).aspx In summary: * Clients sync from a DC or the PDC in local domain * DCs sync from PDC in same domain or any DC in parent domain * PDCs sync from PDC or any DC in parent domain * The PDC in root domain syncs with an external time source Therefore as long as the external time source is 'correct' then all devices within the hierarchy will also have the correct time (within permitted deviations). You do not state which approach you take towards time sync. If you do not utilise an external source, then perhaps the root cause is that the time is incorrect on the root domain PDC. Hope that helps, neil From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Nawaz M. Ahmed Sent: 09 June 2010 11:02 To: 'activedir@mail.activedir.org' Subject: [ActiveDir] Change Time on DC Hi All, We have PDC & ADC (both W2K3R2SP2x64) running since more than 2 years now exist 900+ users. Off late one of our in-house built application (Passenger Dispatch System) uses date & time from Local system. DC's time is currently 6 mins behind from actual time. Does changing the DC's time affects users..? what about end-user do we need to change the time in all PC's also. thanks regs =============================================================================== Please access the attached hyperlink for an important electronic communications disclaimer: http://www.credit-suisse.com/legal/en/disclaimer_email_ib.html ===============================================================================

Syed

Posts:19

06/09/2010 11:40 AM
In a domain, one DC is responsible for the authoritative time -- that is the DC with the PDC-Emulator FSMO role. You can check the role owners with the "netdom query fsmo" command. I'd change the time on that DC -- or even better, sync it with an external time source. You find references and articles on that. As for the impact on services and clients, as long as the time skew is not larger than five minutes, you're okay. On Wed, Jun 9, 2010 at 1:02 PM, Nawaz M. Ahmed <nawazma@saptco.com.sa>wrote: > Hi All, > > > > We have PDC & ADC (both W2K3R2SP2x64) running since more than 2 years now > exist 900+ users. > > Off late one of our in-house built application (Passenger Dispatch System) > uses date & time from Local system. > > DC's time is currently 6 mins behind from actual time. > > Does changing the DC's time affects users..? > > what about end-user do we need to change the time in all PC's also. > > > > thanks > > regs > > > > > > > > > > > > >

DaemonRoot User is Offline

Posts:122

06/09/2010 11:42 AM
Domain joined clients should use NT5DS as their time source, that means they will sync against the AD hierarchy. Kerberos doesn't like when the delta between the client and the DC is higher than 5 minutes so you might want to check that. Who's your PDCemulator getting time from? Is that a valid source? Is it properly synced? The following command should tell you the local configuration "w32tm /dumpreg /subkey:parameters". You can use "w32tm /monitor" to check the time in your DCs. You might want to set things straight with "w32tm /resync /rediscover /nowait" on the faulty system. ~D~ From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Nawaz M. Ahmed Sent: Wednesday, June 09, 2010 4:02 AM To: 'activedir@mail.activedir.org' Subject: [ActiveDir] Change Time on DC Hi All, We have PDC & ADC (both W2K3R2SP2x64) running since more than 2 years now exist 900+ users. Off late one of our in-house built application (Passenger Dispatch System) uses date & time from Local system. DC's time is currently 6 mins behind from actual time. Does changing the DC's time affects users..? what about end-user do we need to change the time in all PC's also. thanks regs

RobSilver

Posts:0

06/09/2010 12:21 PM
Here's a step-by-step article I wrote on how to do this: http://robsilver.org/ad/demystifying-time-in-a-forest/ rob From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Nawaz M. Ahmed Sent: 09 June 2010 11:09 AM To: 'activedir@mail.activedir.org' Subject: [ActiveDir] Change Time on DC Hi All, We have PDC & ADC (both W2K3R2SP2x64) running since more than 2 years now exist 900+ users. Off late one of our in-house built application (Passenger Dispatch System) uses date & time from Local system. DC's time is currently 6 mins behind from actual time. Does changing the DC's time affects users..? what about end-user do we need to change the time in all PC's also. thanks regs

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Change Time on DC

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads