Additional Domain controller W32time - Free-running System Clock

Question

Additional Domain controller W32time - Free-running System Clock

sunil patel 1

I have 1- PDC which has all role holds and 3 Additional DC.

PDC- Win 2008 R2 Ent

ADC- Win 2008 R2 Ent

ADC -DC01-Win2k12 R2

ADC-DC02-Win2k12 R2

I have External NTP Server. Our PDC - sync time from this NTP server.

PDC:- source of NTP is our NTP server. Configuration of PDC is..

C:\Users\administrator.IDMC>w32tm /query /configuration

[Configuration]

EventLogFlags: 2 (Local)

AnnounceFlags: 5 (Local)

TimeJumpAuditOffset: 28800 (Local)

MinPollInterval: 6 (Local)

MaxPollInterval: 10 (Local)

MaxNegPhaseCorrection: 172800 (Local)

MaxPosPhaseCorrection: 172800 (Local)

MaxAllowedPhaseOffset: 300 (Local)

FrequencyCorrectRate: 4 (Local)

PollAdjustFactor: 5 (Local)

LargePhaseOffset: 50000000 (Local)

SpikeWatchPeriod: 900 (Local)

LocalClockDispersion: 10 (Local)

HoldPeriod: 5 (Local)

PhaseCorrectRate: 7 (Local)

UpdateInterval: 100 (Local)

[TimeProviders]

NtpClient (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

CrossSiteSyncFlags: 2 (Local)

AllowNonstandardModeCombinations: 1 (Local)

ResolvePeerBackoffMinutes: 15 (Local)

ResolvePeerBackoffMaxTimes: 7 (Local)

CompatibilityFlags: 2147483648 (Local)

EventLogFlags: 1 (Local)

LargeSampleSkew: 3 (Local)

SpecialPollInterval: 3600 (Local)

Type: NT5DS (Local)

NtpServer (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 0 (Local)

AllowNonstandardModeCombinations: 1 (Local)

VMICTimeProvider (Local)

DllName: C:\Windows\System32\vmictimeprovider.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

In Additional DC - Time Sync source is Free-running System Clock. Other DC -1 & DC-2 Sync time from ADC which source is not NTP or PDC.

in ADC-1

C:\Users\administrator.IDMC>w32tm /query /configuration

[Configuration]

EventLogFlags: 2 (Local)

AnnounceFlags: 5 (Local)

TimeJumpAuditOffset: 28800 (Local)

MinPollInterval: 6 (Local)

MaxPollInterval: 10 (Local)

MaxNegPhaseCorrection: 172800 (Local)

MaxPosPhaseCorrection: 172800 (Local)

MaxAllowedPhaseOffset: 300 (Local)

FrequencyCorrectRate: 4 (Local)

PollAdjustFactor: 5 (Local)

LargePhaseOffset: 50000000 (Local)

SpikeWatchPeriod: 900 (Local)

LocalClockDispersion: 10 (Local)

HoldPeriod: 5 (Local)

PhaseCorrectRate: 7 (Local)

UpdateInterval: 100 (Local)

[TimeProviders]

NtpClient (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

CrossSiteSyncFlags: 2 (Local)

AllowNonstandardModeCombinations: 1 (Local)

ResolvePeerBackoffMinutes: 15 (Local)

ResolvePeerBackoffMaxTimes: 7 (Local)

CompatibilityFlags: 2147483648 (Local)

EventLogFlags: 1 (Local)

LargeSampleSkew: 3 (Local)

SpecialPollInterval: 3600 (Local)

Type: NT5DS (Local)

NtpServer (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 0 (Local)

AllowNonstandardModeCombinations: 1 (Local)

VMICTimeProvider (Local)

DllName: C:\Windows\System32\vmictimeprovider.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

sunil patel 1 Reputation point

2023-09-17T07:31:10.0566667+00:00

Error on ADC:

“NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)”.

3 answers

Your answer

sunil patel 1 Reputation point

2023-09-17T07:31:10.0566667+00:00

Error on ADC:

“NtpClient was unable to set a domain peer to use as a time source because of discovery error. NtpClient will try again in 3473457 minutes and double the reattempt interval thereafter. The error was: The entry is not found. (0x800706E1)”.

Answer 1

Anonymous

Some general info

All domain members should use NT5DS domain time.
Desktops and member servers sync with any domain controller.
Domain controllers sync with PDC emulator (one per domain)
PDC emulator in child domain can sync with any domain controller in parent domain.
PDC emulator in parent domain syncs with either a hardware clock or possibly an external source.

https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

Might try resetting the problematic one.

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /syncfromflags:domhier /update  
net stop w32time
net start w32time

then check

w32tm /query /source
w32tm /query /configuration

--please don't forget to close up the thread here by marking answer if the reply is helpful--

sunil patel 1 Reputation point

2023-09-17T13:05:47.9833333+00:00

Yes. all other domain has NT5DS and that command run on more than 20 times and restart server also but till its LOCAL CMOS
Anonymous

2023-09-17T13:20:08.21+00:00

Sounds similar to the routing / firewall issue of the other thread?

--please don't forget to close up the thread here by marking answer if the reply is helpful--
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Anonymous

2023-09-18T12:19:57.4033333+00:00

Just checking if there's any progress or updates?

--please don't forget to close up the thread here by marking answer if the reply is helpful--
sunil patel 1 Reputation point

2023-09-18T12:41:09.38+00:00

Thanks. still searching solution over internet.. There is no firewall, networking issue found

sunil patel 1

Running enterprise tests on : idmc.coop
   Starting test: LocatorCheck
      Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
      A Primary Domain Controller could not be located.
      The server holding the PDC role is down.
      Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
      A Time Server could not be located.
      The server holding the PDC role is down.
      Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error
      1355
      A Good Time Server could not be located.
      ......................... idmc.coop failed test LocatorCheck
   Starting test: Intersite
      ......................... idmc.coop passed test Intersite

sunil patel 1 Reputation point

2023-09-18T12:45:04.8533333+00:00

on All ADC same error. PDC working fine
Anonymous

2023-09-18T18:01:05.25+00:00

Might check the system and replication event logs for clues.
sunil patel 1 Reputation point

2023-09-19T03:30:53.7133333+00:00

I have performed same NTP settings on one of ADC. like

w32tm /config /manualpeerlist:"pool.ntp.org,0x1" /syncfromflags:manual /reliable:yes /update

w32tm /config /update

Restart-Service w32time

w32tm /resync /rediscover

w32tm /resync

ADC give perfect time from NTP. DCDIAG DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error also resolved.

but on DC1 & DC2 same error. so pleaase guide is it right configuration which did on ADC
? If yes then i have to do for all Dc1- Dc2 ?

Answer 2

Anonymous

I posted above the commands but it sounds like you may have some other issues. What's in the event logs? Sysvol and netlogon shares present?

sunil patel 1 Reputation point

2023-09-19T13:12:40.27+00:00

No error. both shares are accessible on all DC

Answer 3

Anonymous

I'd suggest starting a case here with product support.

https://support.serviceshub.microsoft.com/supportforbusiness

--please don't forget to close up the thread here by marking answer if the reply is helpful--

Share via

Additional Domain controller W32time - Free-running System Clock

3 answers

Your answer