Time difference between events logs time and Windows time

Question

Hi guys,

Strange topic: the first time that I see this bug

I have 4 DCs in 2 sites. They all are set to synchronize their time with a network probe (customer choice). 3 DCs are well synchronized but the last has a bug.

It receives the time from the probe but at the bottom right where is displayed the time, the time is not correct (1 hour less) while the time in the events logs is correct.

Do you have an idea please ?

Thanks

Answer 1

Sounds like a configuration problem.

Some general info

• All domain members should use NT5DS domain time.
• Desktops and member servers sync with any domain controller.
• Domain controllers sync with PDC emulator (one per domain)
• PDC emulator in child domain can sync with any domain controller in parent domain.
• PDC emulator in parent domain syncs with either a hardware clock or possibly an external source.
  https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hi,
In a domain environment, it is suggested to sync time as following:
All computers and devices on a domain synchronize system time using the domain hierarchy.
Domain members synchronize time with domain controllers, which in turn synchronize time with the domain controller running the PDC emulator role.
The PDC emulator of the forest root domain is at the top of the domain hierarchy and is configured to sync time with a reliable external time source.

You may try to run command on the DC (with the time does not correct) to check if the time source was configured right:
w32tm /query /Source

Then Resync the time

Fan

Answer 3

Can you post the output of the following command on the server showing the time difference:

w32tm /stripchart /computer:<DC>

Where <DC> is one of the domain controller where the time is right.

Note that as I mentioned in my comment, if the time difference in the system tray is exactly 1 hour, and the time in the log is correct, you might just have the wrong time zone (the system tray displays the time taking the TZ into consideration).