W32tm-TimeSync
W32tm TimeSync
-----------------------------
w32tm /config /syncfromflags:manual /manualpeerlist:serverdc1 /update
*DONOTUSE*w32tm /config /syncfromflags:manual /manualpeerlist:time.windows.com /update
w32tm /config /syncfromflags:manual /manualpeerlist:europe.pool.ntp.org /update
Resync
w32tm /resync /nowait
w32tm /resync /rediscover /nowait
w32tm /resync /force
Status
W32tm /monitor
w32tm /query /source
W32tm /query /status
w32tm /query /configuration
portqry –n europe.pool.ntp.org –e 123 –p UDP
Domain Time Sync
Make sure there is no firewall blocking UDP port 123
On the problem machine run;
w32tm /config /syncfromflags:domhier /update
then;
net stop w32time
net start w32time
or net stop w32time & net start w32time - one command
Domain Reset Time Sync
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm /config /syncfromflags:domhier /update
net stop w32time
net start w32time
Main NTP / Reset TimeSync
elevated command prompt:
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
That way you can start fresh with:
w32tm /config /manualpeerlist:PEERS /syncfromflags:manual /reliable:yes /update
Please set for PEERS the time source as listed above, either with it’s ip address or DNS name. If more then one is needed separate them with a space in between and don't forget the quotes: "time.domain.com time1.domain.com"
Internet Time servers you can find here: http://www.pool.ntp.org/
Windows Firewall = To check UDP port status on the PDC emulator
1.To check inbound UDP port 123 status on the domain controller that is the PDC emulator, click Start, point to Administrative Tools, and then click Windows Firewall with Advanced Security.
2.Click Inbound Rules. Check that Active Directory Domain Controller - W32Time (NTP-UDP-In) has a status of enabled (green) and is not blocked:
◦ If this rule is disabled (dimmed), right-click the rule, and then click Enable.
◦ If the rule is blocked, right-click the rule, and then click Properties. Under Action, click Allow the connections, and then click OK.
3.To check outbound UDP port status on the domain controller, click Outbound Rules.
4.Check that Active Directory Domain Controller (UDP-Out) has a status of enabled and is not blocked:
◦ If the rule is disabled (dimmed), right-click the rule, and then click Enable.
◦ If the rule is blocked, right-click the rule, and then click Properties. Under Action, click Allow the connections, and then click OK.
Or
To open only outbound UDP port 123, create a separate outbound rule for the specific port, as follows:
a. In Windows Firewall with Advanced Security, right-click Outbound Rules, and then click New.
b. In the New Outbound Rule Wizard, click Port, and then click Next.
c. Click UDP, click Specific local ports, type 123, and then click Next.
d. Follow the directions in the wizard to configure the security settings and name the rule, and then click Finish.
5. To ensure that the PDC emulator responds, on an NTP client, repeat the test in step 2 of the procedure “To configure the Windows Time service on the PDC emulator” earlier in this topic.
Warning: Reverse name resolution is best effort. It may not be correct since RefID field in time packets differs across NTP implementations and may not be using IP addresses.
Using Windows scheduler..
http://www.pretentiousname.com/timesync/