Domain time - clients not synching with DC

  • Thread starter Thread starter EdRoche
  • Start date Start date
E

EdRoche

Guest
For some reason the clients in our domain are not synching the time with the
domain controller - I presume should be default behaviour. They are out but
only a few minutes but it is v annoying and sometimes causes people not to
get their mapped drives. I would put a net time line into the login script
but as most users are not admins on the local PCs they dont have access to
change time under their account. The client firewalls are on and I included a
port exception for 123 UDP.

Should the clients update their time automatically with the DC
automatically? Can someone explain a simple and straight forward solution?

Thanks
 
Re: Domain time - clients not synching with DC

Ed,
Yes it should be automatic so you need to investigate why its not happening.
You can execute a resync with this:
http://technet.microsoft.com/en-us/library/cc758905.aspx
Do you have errors in the event logs of the PC's relating to time or DC
connection? How far out are the PC's?
Anthony,
http://www.airdesk.com



"EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...
> For some reason the clients in our domain are not synching the time with
> the
> domain controller - I presume should be default behaviour. They are out
> but
> only a few minutes but it is v annoying and sometimes causes people not to
> get their mapped drives. I would put a net time line into the login script
> but as most users are not admins on the local PCs they dont have access to
> change time under their account. The client firewalls are on and I
> included a
> port exception for 123 UDP.
>
> Should the clients update their time automatically with the DC
> automatically? Can someone explain a simple and straight forward solution?
>
> Thanks
 
Re: Domain time - clients not synching with DC

Hello EdRoche,

Check out this command at the clients:

w32tm /config /syncfromflags:domhier /update

After that run:

net stop w32time

net start w32time

Did you test it on one machine with the firewall disabled? Also make sure
that you only use domain internal DNS servers.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> For some reason the clients in our domain are not synching the time
> with the domain controller - I presume should be default behaviour.
> They are out but only a few minutes but it is v annoying and sometimes
> causes people not to get their mapped drives. I would put a net time
> line into the login script but as most users are not admins on the
> local PCs they dont have access to change time under their account.
> The client firewalls are on and I included a port exception for 123
> UDP.
>
> Should the clients update their time automatically with the DC
> automatically? Can someone explain a simple and straight forward
> solution?
>
> Thanks
>
 
Re: Domain time - clients not synching with DC

Hi Anthony,

Thanks for that. There are about 100 clients here and going to each isnt an
option. The w32tm /config /syncfromflags:domhier /update command need to be
run as an administrator and all clients have non-admin access to the local
PCs on the domain. Is there a vb script version of this I can include in my
login linked with group policy or how can this be done centrally?

Thanks

"Anthony [MVP]" wrote:

> Ed,
> Yes it should be automatic so you need to investigate why its not happening.
> You can execute a resync with this:
> http://technet.microsoft.com/en-us/library/cc758905.aspx
> Do you have errors in the event logs of the PC's relating to time or DC
> connection? How far out are the PC's?
> Anthony,
> http://www.airdesk.com
>
>
>
> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...
> > For some reason the clients in our domain are not synching the time with
> > the
> > domain controller - I presume should be default behaviour. They are out
> > but
> > only a few minutes but it is v annoying and sometimes causes people not to
> > get their mapped drives. I would put a net time line into the login script
> > but as most users are not admins on the local PCs they dont have access to
> > change time under their account. The client firewalls are on and I
> > included a
> > port exception for 123 UDP.
> >
> > Should the clients update their time automatically with the DC
> > automatically? Can someone explain a simple and straight forward solution?
> >
> > Thanks

>
>
 
Re: Domain time - clients not synching with DC

Ed,
You can use a computer Startup script to do that. Its in the computer
configuration part of the GPO.
It should happen automatically so I would be inclined to investigate why it
is not,
Anthony,
http://www.airdesk.com

"EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
news:AB4833D5-12F2-4BA1-A890-EFCDD97A6667@microsoft.com...
> Hi Anthony,
>
> Thanks for that. There are about 100 clients here and going to each isnt
> an
> option. The w32tm /config /syncfromflags:domhier /update command need to
> be
> run as an administrator and all clients have non-admin access to the local
> PCs on the domain. Is there a vb script version of this I can include in
> my
> login linked with group policy or how can this be done centrally?
>
> Thanks
>
> "Anthony [MVP]" wrote:
>
>> Ed,
>> Yes it should be automatic so you need to investigate why its not
>> happening.
>> You can execute a resync with this:
>> http://technet.microsoft.com/en-us/library/cc758905.aspx
>> Do you have errors in the event logs of the PC's relating to time or DC
>> connection? How far out are the PC's?
>> Anthony,
>> http://www.airdesk.com
>>
>>
>>
>> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
>> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...
>> > For some reason the clients in our domain are not synching the time
>> > with
>> > the
>> > domain controller - I presume should be default behaviour. They are out
>> > but
>> > only a few minutes but it is v annoying and sometimes causes people not
>> > to
>> > get their mapped drives. I would put a net time line into the login
>> > script
>> > but as most users are not admins on the local PCs they dont have access
>> > to
>> > change time under their account. The client firewalls are on and I
>> > included a
>> > port exception for 123 UDP.
>> >
>> > Should the clients update their time automatically with the DC
>> > automatically? Can someone explain a simple and straight forward
>> > solution?
>> >
>> > Thanks

>>
>>
 
Re: Domain time - clients not synching with DC

Thanks Anthony,

If I put the script in the GPO will the command have the necessary
privileges to execute if the user account logging on to the PC is not an
administrator?

Any ideas why the time is not synching automatically? I have no more ideas.


"Anthony [MVP]" wrote:

> Ed,
> You can use a computer Startup script to do that. Its in the computer
> configuration part of the GPO.
> It should happen automatically so I would be inclined to investigate why it
> is not,
> Anthony,
> http://www.airdesk.com
>
> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
> news:AB4833D5-12F2-4BA1-A890-EFCDD97A6667@microsoft.com...
> > Hi Anthony,
> >
> > Thanks for that. There are about 100 clients here and going to each isnt
> > an
> > option. The w32tm /config /syncfromflags:domhier /update command need to
> > be
> > run as an administrator and all clients have non-admin access to the local
> > PCs on the domain. Is there a vb script version of this I can include in
> > my
> > login linked with group policy or how can this be done centrally?
> >
> > Thanks
> >
> > "Anthony [MVP]" wrote:
> >
> >> Ed,
> >> Yes it should be automatic so you need to investigate why its not
> >> happening.
> >> You can execute a resync with this:
> >> http://technet.microsoft.com/en-us/library/cc758905.aspx
> >> Do you have errors in the event logs of the PC's relating to time or DC
> >> connection? How far out are the PC's?
> >> Anthony,
> >> http://www.airdesk.com
> >>
> >>
> >>
> >> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
> >> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...
> >> > For some reason the clients in our domain are not synching the time
> >> > with
> >> > the
> >> > domain controller - I presume should be default behaviour. They are out
> >> > but
> >> > only a few minutes but it is v annoying and sometimes causes people not
> >> > to
> >> > get their mapped drives. I would put a net time line into the login
> >> > script
> >> > but as most users are not admins on the local PCs they dont have access
> >> > to
> >> > change time under their account. The client firewalls are on and I
> >> > included a
> >> > port exception for 123 UDP.
> >> >
> >> > Should the clients update their time automatically with the DC
> >> > automatically? Can someone explain a simple and straight forward
> >> > solution?
> >> >
> >> > Thanks
> >>
> >>

>
 
Re: Domain time - clients not synching with DC

Hi Ed,
A startup script runs in the computer Local System security context when the
computer starts, before the user logs in.
What exact errors do you see in the Event Logs? Anthony,
http://www.airdesk.com


"EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
news:431E0DD5-9003-4D0F-A79B-78BF3E97A447@microsoft.com...
> Thanks Anthony,
>
> If I put the script in the GPO will the command have the necessary
> privileges to execute if the user account logging on to the PC is not an
> administrator?
>
> Any ideas why the time is not synching automatically? I have no more
> ideas.
>
>
> "Anthony [MVP]" wrote:
>
>> Ed,
>> You can use a computer Startup script to do that. Its in the computer
>> configuration part of the GPO.
>> It should happen automatically so I would be inclined to investigate why
>> it
>> is not,
>> Anthony,
>> http://www.airdesk.com
>>
>> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
>> news:AB4833D5-12F2-4BA1-A890-EFCDD97A6667@microsoft.com...
>> > Hi Anthony,
>> >
>> > Thanks for that. There are about 100 clients here and going to each
>> > isnt
>> > an
>> > option. The w32tm /config /syncfromflags:domhier /update command need
>> > to
>> > be
>> > run as an administrator and all clients have non-admin access to the
>> > local
>> > PCs on the domain. Is there a vb script version of this I can include
>> > in
>> > my
>> > login linked with group policy or how can this be done centrally?
>> >
>> > Thanks
>> >
>> > "Anthony [MVP]" wrote:
>> >
>> >> Ed,
>> >> Yes it should be automatic so you need to investigate why its not
>> >> happening.
>> >> You can execute a resync with this:
>> >> http://technet.microsoft.com/en-us/library/cc758905.aspx
>> >> Do you have errors in the event logs of the PC's relating to time or
>> >> DC
>> >> connection? How far out are the PC's?
>> >> Anthony,
>> >> http://www.airdesk.com
>> >>
>> >>
>> >>
>> >> "EdRoche" <EdRoche@discussions.microsoft.com> wrote in message
>> >> news:39597C7B-51D1-4069-8951-038725F62F98@microsoft.com...
>> >> > For some reason the clients in our domain are not synching the time
>> >> > with
>> >> > the
>> >> > domain controller - I presume should be default behaviour. They are
>> >> > out
>> >> > but
>> >> > only a few minutes but it is v annoying and sometimes causes people
>> >> > not
>> >> > to
>> >> > get their mapped drives. I would put a net time line into the login
>> >> > script
>> >> > but as most users are not admins on the local PCs they dont have
>> >> > access
>> >> > to
>> >> > change time under their account. The client firewalls are on and I
>> >> > included a
>> >> > port exception for 123 UDP.
>> >> >
>> >> > Should the clients update their time automatically with the DC
>> >> > automatically? Can someone explain a simple and straight forward
>> >> > solution?
>> >> >
>> >> > Thanks
>> >>
>> >>

>>
 
Back
Top