w32tm /monitor source of information

Question

Hello everyone, would someone know where w32tm /monitor gets its data from?

I've always been curious to know if there's some kind of database, table, registry or adsiedit accessible entry that w32tm /monitor refers to when grabbing that data. Since I've never been able to find it somewhere concrete, it's really not that clear how the command populates the entries it shows.

Answer 1

Hi @someguyinslacks ,

Thanks for the question. As @Dave Patrick stated w32tm /monitor monitors a domain or a set of computers for the Windows Time Service. The best way to dive deep into how this tool works would be to look into the Windows Time Service itself here.

Answer 2

It monitors the domain for a list of valid time servers.

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

There's likely nothing stored anywhere, its just a dynamic query. For example if one of the domain controllers was off or rebooting when you ran it, that one one not be returned.

--please don't forget to Accept as answer if the reply is helpful--