W32tm always on "Local CMOS clock" on virtual domain controller - cannot change to NTP server
The domain controller (Server 2012R2) is hosted on Hyper-V (Server 2012R2). It is a PDC.
- firewall disabled
- cleaned up w32tm:
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
- applied ifixit from http://support.microsoft.com/kb/816042 to enable external ntp server de.pool.ntp.org
- disabled
VMICTimeProvider in registry
(HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider\Enabled = 0)
I can manually query the ntp server de.pool.ntp.org:
w32tm /stripchart /computer:de.pool.ntp.org /samples:5 /dataonly
de.pool.ntp.org wird verfolgt [131.188.3.221:123].
5 Proben werden gesammelt.
Es ist 24.04.2014 10:07:36.
10:07:36, +00.0115379s
10:07:38, -00.0025048s
10:07:40, -00.0008595s
10:07:42, -00.0010477s
10:07:44, -00.0014516s
But still, w32tm does NOT query the ntp server:
PS C:\Windows\system32> w32tm /query /source
Local CMOS clock
rosch
Hi rosch,
Based on your description, please check if disable the "Time synchronization" Integration service. Please refer
to the following operation.
In Hyper-V Manager, right click the DC and select “Settings…”.
In the left panel of Settings, navigate to Integration Services and click it.
Then in the right panel, please uncheck Time synchronization.
By the way, please check if can connect to the time server and UDP port was opened for NTP.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu
Similar Messages
-
Can I move a Virtual Domain Controller from one host(Win Server 2008 R2) to another (Win Server 2012 R2) ? Are there any issues?
I also had this error: "Setup cannot continue. Your computer will now restart, and your previous version of Windows will be restored."
trying to do a in-place upgrade of a Domain Controller Windows 2008 R2 to Windows 2012 R2.
The problem was the separated System Reserved Partition. After I removed using this instructions:
http://jacobackerman.blogspot.com/2012/12/how-to-remove-system-reserved-partition.html
The upgrade ran ok, and now have my DC as Windows 2012 R2.
Hope that helps!. -
W32time source showing as Local CMOS clock
I have 3 virtual servers, all on different hosts, which are currently showing the wrong time. All other machines on the Domain get their time from the Domain Controller.
I have only been making changes on 1 server to ensure that this works. Originally the server was showing as getting its time from the host machine (VM IC Time Synchronization Provider). I then attempted:
w32tm /config /syncfromflags:domhier /update
Stopped and started the w32time service, then checked the source again. This was then showing as local CMOS clock.
I have tried several things, including setting a peer list with just the required Domain Controller, but the source remains as CMOS clock.
I've switched Time Integration services off on the Host, which I understand is not an ideal thing to do, but I'm at a loss.
Please helpHi AmandaJayne,
Just additional. Please refer to the following KB and make sure that configure an Authoritative Time Server
correctly.
How to configure an authoritative time server in Windows
Server
Please temporarily disable firewall and check if UDP port 123 was blocked.
By the way, would you please let me know whether configure an Authoritative Time Server via Group Policy?
Hope this helps.
Best regards,
Justin Gu -
Windows 2008 R2 Domain Controller (PDC) - NTP server - time showing local CMOS clock
I'm having issues setting an external source on a Windows 2008 R2 domain controller (PDC emulator role for the domain)
Here is the output showing its source is the Local CMOS clock.
C:\Windows\System32>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 1 (primary reference - syncd by radio clock)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0000000s
Root Dispersion: 10.0000000s
ReferenceId: 0x4C4F434C (source name: "LOCL")
Last Successful Sync Time: 06/11/2014 15:44:15
Source: Local CMOS Clock
Poll Interval: 6 (64s)
1) I have performed the following on the DC with the PDC role:
net stop w32time
w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org"
w32tm /config /reliable:yes
net start w32time
w32tm /query /configuration
[Configuration]
EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 172800 (Local)
MaxPosPhaseCorrection: 172800 (Local)
MaxAllowedPhaseOffset: 300 (Local)
FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)
[TimeProviders]
NtpClient (Local)
DllName: C:\Windows\System32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Local)
ResolvePeerBackoffMaxTimes: 7 (Local)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 1 (Local)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Local)
Type: NTP (Local)
NtpServer: 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org (Local)
NtpServer (Local)
DllName: C:\Windows\System32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
But still showing the output:
C:\Windows\System32>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 1 (primary reference - syncd by radio clock)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0000000s
Root Dispersion: 10.0000000s
ReferenceId: 0x4C4F434C (source name: "LOCL")
Last Successful Sync Time: 06/11/2014 15:58:45
Source: Local CMOS Clock
Poll Interval: 6 (64s)
2. If I resync and rediscover the following error appears:
w32tm /resync /rediscover
Sending resync command to local computer
The computer did not resync because no time data was available.
3. I've also clearing the current time config, by
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
But no change, it still shows the Local CMOS clock.
4. This event is showing
Log Name: System
Source: Microsoft-Windows-Time-Service
Date: 06/11/2014 15:43:30
Event ID: 12
Task Category: None
Level: Warning
Keywords:
User: LOCAL SERVICE
Computer: domaincontroller1
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source.
It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy.
If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
<EventID>12</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-11-06T15:43:30.465619200Z" />
<EventRecordID>77295</EventRecordID>
<Correlation />
<Execution ProcessID="256" ThreadID="2056" />
<Channel>System</Channel>
<Computer>domaincontroller1</Computer>
<Security UserID="SID" />
</System>
<EventData Name="TMP_EVENT_DOMAIN_HIERARCHY_ROOT">
</EventData>
</Event>
5. If I perform the below it appears DC2 is having problems but I'm not sure if related.
C:\w32tm /monitor
DC1.domain.local *** PDC ***[192.168.1.1:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from DC1.domain.local
RefID: 'LOCL' [0x4C434F4C]
Stratum: 1
DC2.domain.local[192.168.1.2:123]:
ICMP: 0ms delay
NTP: -110.4925481s offset from DC1.domain.local
RefID: (unspecified / unsynchronized) [0x00000000]
Stratum: 0
DC3.domain.local[192.168.2.1:123]:
ICMP: 0ms delay
NTP: -0.0256084s offset from DC1.domain.local
RefID: DC1.domain.local [192.168.1.1]
Stratum: 2
DC4.domain.local[192.168.2.4:123]:
ICMP: 0ms delay
NTP: -0.0011524s offset from DC1.domain.local
RefID: 80.84.77.86.rev.sfr.net [86.77.84.80]
Stratum: 2
Warning:
Reverse name resolution is best effort. It may not be
correct since RefID field in time packets differs across
NTP implementations and may not be using IP addresses.
Any help would be much appreciated. Thanks.
Craig BrandI suspected some issue with AV so uninstalled.
To resolve the Access Denied I followed these steps:
stop w32time
w32tm /unregister
reboot
regsvr32 /u w32time.dll
w32tm /register
sc query w32time -- you should see that the service is set to
shared mode -- this is presumably how it should be -- if you try to start right now, you'll get the expected 1290 SID-related error
reboot
w32time should now automatically start at boot up and be running -- that was my result -- it's running as shared, started on its own, and I can do the w32tm /query commands successfully
After rebooting the time service started.
I then repeated the steps:
net stop w32time
w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org"
w32tm /config /reliable:yes
net start w32time
w32tm /query /configuration
And all worked. I'll wait a short while to see if this fixes the issue. I also have am SA case with MS so will confirm fix when resolved.
Craig Brand -
Cannot get Guest Services to Start on Virtual Domain Controller
I'm running System Center 2012 SP1 Version 3.1.6018.0
Guests all run Server 2008R2 SP1
I'm having a weird issue when trying to install guests services on a domain controller. On all of the virtual machines of the host, when trying to deploy the guest agent, it fails on all machines with the same error:
Error (2940)
VMM is unable to complete the requested file transfer. The connection to the HTTP server XXXXXXX could not be established.
Unknown error (0x80072ee2)
Recommended Action
Ensure that the HTTP service and/or the agent on the machine powstorehv1.gicw.org are installed and running and that a firewall is not blocking HTTP/HTTPS traffic on the configured port.
I have confirmed that there is no firewall blocking the process so in order to bypass this, I decided to just install the guest agent manually. This worked on all of the virtual machines on the host except for the one that is a Domain Controller.
At the point when it tries to start the service it gives me the following error:
Service 'Microsoft System Center Virtual Machine Manager Guest Agent' (ScvmmGuestService) failed to start. Verify that you have sufficient privileges to start system services.
I have tried with and without UAC enabled and I always run the MSI from an elevated command prompt. I've tried with and without MSIEXEC as well. I have Enterprise and Domain Admin privileges as well and have even tried with the domain administrator account.
At this point I'm not sure why I do not have sufficient privileges to start the service on a Domain Controller but I do understand that permissions are different due to its nature.
Any ideas around this either by installing through SCVMM or manually? Thank you in advance for your time!After a very painful 10g (EE) installation process
i.e fixing all the following:<snip>
Sat Jul 17 11:40:19 2004
Errors in file
/Users/oracle/admin/db01/bdump/db01_mman_4039.trc:
ORA-07445: exception encountered: core dump [semop+8]
[SIGFPE] [Invalid floating point operation]
[0x41EDB3C] [] []
Sat Jul 17 11:40:21 2004
Errors in file
/Users/oracle/admin/db01/bdump/db01_pmon_4037.trc:
ORA-00822: MMAN process terminated with error
Sat Jul 17 11:40:21 2004
PMON: terminating instance due to error 822
Instance terminated by PMON, pid = 4037==============================================> Any idea on what needs to be done to fix this error.
I remember that i had the very same issue with the
Oracle 9i R2 Developers release.
Any help will be greatly appreciated.You mentioned the 9ir2 release. Do you still have any reference to the 9ir2 software in your environment ? With a little luck you have, and in that case it not so hard to find a solution ...
Ronald.
http://homepage.mac.com/ik_zelf/oracle -
Clock setting will be cleared by reload with "ntp server" configuration?
Hi,
I have configured 7204VXR (NPE300) processor with IOS Version 12.1(9) as "ntp server", and the clock settting have not been cleared by system reboot. I remember that the manual clock setting is cleared by reload or power off and on of the device.
Clock setting will not be cleared by reload or power off and on if the device is configured as "ntp server"?
Best Regards,
Eiji YanagiDouble check your config. Here's the URL for help: http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/fun_c/fcprt3/fcd303.htm#xtocid2592116
-
Hi I am running a virtulized server 2012R2 DC DC02TL.test.local in a lab environment. I want to clone the DC. I am following this tutorial.
http://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-48-12-metablogapi/0020.clone3_5F00_49D67345.png
I put the DC into the Group of clonable Dcs but somehow the CMDLet
New-ADDCCloneConfigFile
does not seem to recognize that the DC is in that group and fails. I tried to reboot the DC, but no luck.https://support.microsoft.com/kb/2745013?wa=wsignin1.0
This link may help you.
Darshana Jayathilake -
Domain Controller - Time Syncing with CMOS Clock
Hello!
We have a DC that is syncing time from "local CMOS clock." This DC is a VM (hyper V). Integration services has "time sync" turned off.
I've attempted syncing the DC to an external time source per http://www.thirdtier.net/2011/02/how-to-set-an-ntp-time-server-in-windows-2008-sbs-2008-and-sbs-2011/ and the issue persists.
Also of note - I've attempted syncing the VMHOST to an external source as well, and it is only syncing with CMOS clock
w32tm /config /manualpeerlist:"time.windows.com" /syncfromflags:manual /reliable:yes /update
- results>
I manually restarted Windows Time service, still syncing to CMOS
w32tm /resync /rediscover
- results>
the computer did not resync because no time data was available
w32tm /stripchart /computer:time.windows.com /samples:5 /dataonly
- results>
Tracking time.windows.com [65.55.56.206:123].
Collecting 5 samples.
The current time is 4/14/2014 12:34:41 PM.
12:34:41, -16.0686354s
12:34:43, error: 0x800705B4
12:34:46, -16.0885249s
12:34:48, -16.0981303s
12:34:50, -16.0785199s
w32tm /monitor
- results>
EVEREST.COMPANYNAME.local[192.168.45.34:123]:
ICMP: 0ms delay
NTP: +17.4000482s offset from COMPANYNAME-DC1.COMPANYNAME.local
RefID: 'LOCL' [0x4C434F4C]
Stratum: 1
COMPANYNAME-DC1.COMPANYNAME.local *** PDC ***[192.168.45.31:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from COMPANYNAME-DC1.COMPANYNAME.local
RefID: 'LOCL' [0x4C434F4C]
Stratum: 1
COMPANYNAME-MGMT.COMPANYNAME.local[192.168.45.33:123]:
ICMP: error IP_REQ_TIMED_OUT - no response in 1000ms
NTP: error ERROR_TIMEOUT - no response from server in 1000ms
COMPANYNAME-DS1.COMPANYNAME.local[192.168.45.32:123]:
ICMP: 0ms delay
NTP: +14.7149589s offset from COMPANYNAME-DC1.COMPANYNAME.local
RefID: 80.84.77.86.rev.sfr.net [86.77.84.80]
Stratum: 2
EVEREST.COMPANYNAME.local = 2k3 box
COMPANYNAME-MGMT.COMPANYNAME.local = old DC improperly removed from domain (aka was just deleted from Hyper V by another technician...)
COMPANYNAME-DC1.COMPANYNAME.local = primary "main" DC, 2k8
COMPANYNAME-DS1.COMPANYNAME.local = backup DC, 2k8
I can provide whatever other info that may prove useful. I've looked @ other posts RE: this issue and feel like I might be missing something obvious, but I am at a loss.
Thank you!Hi,
Is UDP 123 open on the machine? I suggest you try to disable firewall to see if it works.
More information for you:
Can't get NTP time working on SErver 2008 R2 DC
http://social.technet.microsoft.com/Forums/windowsserver/en-US/e5e26e4f-1988-4ec1-8837-6d1d503130e7/cant-get-ntp-time-working-on-server-2008-r2-dc?forum=windowsserver2008r2general
Configuring the Windows Time Service for Windows Server
http://msmvps.com/blogs/acefekay/archive/2009/09/18/configuring-the-windows-time-service-for-windows-server.aspx
Error message when you run the "w32tm /resync" command to synchronize Windows Server 2003 or Windows SBS to an external time source: "The computer did not resync because no time data
was available"
http://support.microsoft.com/kb/929276
Time synchronization is not performed even though the W32Time service is successfully started in Windows Server 2008 or in Windows Server 2008 R2
http://support.microsoft.com/kb/2493006
Best Regards,
Amy -
I have a Windows Server 2012 R2 virtualization cluster. All the hosts are connected to an external storage system, and virtual machines' files are stored on external volumes (CSVs). All the hosts and virtual machines are a part of the same AD domain
(mixed Windows Server 2012 RTM / 2008 R2 domain controllers). All the domain controllers are running in the virtual machines on the hosts of this cluster.
To prevent problems when all the hosts are turned off and then on simultaneously (for example, because of a power failure) all the domain controller VM files has been placed on local disks of the virtualization hosts (not on the Cluster Shared
Volumes). As Hyper-V services don't depend on other Windows Server services (except its networking components), it means that my domain controllers can always start, providing the virtualization host can start at all. However, it also means
that those DCs cannot be (quickly) migrated to other hosts while their current hosts are being rebooted. So if I need to reboot a virtualization host to install new updates, for example, I have to shut down the corresponding DC, reboot the host
and wait for the DC to finish cold boot and come back online. It means some interruption of service for our users, which, in turn, requires me to perform the reboots late in night.
The downtime can be significantly decreased by saving the state of the VM in which the DC is running. However, all the articles I've found on the Internet strongly recommend against it. I'm trying to understand why this recommendation was issued in the first
place. However, I'm unable to find a clear explanation. I've found some statements that saving state of a DC can cause serious AD replication problems because of tombstoning, and that the password of a DC computer account may be changed
while the DC itself stays in the saved state, which could prevent the DC from connecting to the domain after its state has been restored. However, those considerations are non-significant when we discuss a short-time
(5 to 10 minutes) saved state.
I work with AD and virtualization long time, and I fail to see any danger in saving state of a DC for several minutes. In my opinion, after its state has been restored it would simply replicate all the AD changes from other DCs, and that's all.
What's your opinion?
Evgeniy Lotosh
MSCE: Server infractructire, MCSE: MessagingHello,
as stated in "http://technet.microsoft.com/en-us/library/virtual_active_directory_domain_controller_virtualization_hyperv(v=ws.10).aspx"
Operational Considerations for Virtualized Domain Controllers
Domain controllers that are running on virtual machines have operational restrictions that do not apply to domain controllers that are running on physical machines. When you use a virtualized domain controller, there are some virtualization software features
and practices that you should not use:
Do not pause, stop, or store the
saved state of a domain controller
in a virtual machine for time periods longer than the tombstone lifetime of the forest and then resume from the paused or saved state.
This may sound as it is supported to store it for shorter times and use it.
BUT recommendation also from the Hyper-V Program manager in
http://blogs.msdn.com/b/virtual_pc_guy/archive/2008/11/24/the-domain-controller-dilemma.aspx recommends against using them.
Also best practices
http://blogs.technet.com/b/vikasma/archive/2008/07/24/hyper-v-best-practices-quick-tips-2.aspx
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter: -
Connecting Virtual Machine to physical Domain Controller
Hello,
I have a Hyper-V environment set up. My virtual machines are on my domain controller. I would like to connect these virtual machines onto the domain controller I am hosting them on. I have tried however I always get the error saying the domain controller
cannot be contacted.
Thanks in advance,
Maksim Richardshttp://blogs.technet.com/b/jhoward/archive/2008/06/16/how-does-basic-networking-work-in-hyper-v.aspx is a good article that explains the basics
of Hyper-V networking. What you are describing generally comes down to understanding the basics and getting your virtual networking switch(es) properly configured. When it comes to networking, IP is the same whether using physical or virtual machines.
You have to ensure that you have the proper paths in place that allow the communications to take place.
As for support of Hyper-V on a DC, I've not seen that it is unsupported. Bad idea? Yes. Recommended practice? No. Would I do it? No. Should it work? Absolutely. Supported? I haven't seen a Microsoft
statement on that.
.:|:.:|:. tim -
Mailman virtual domains configuration - Anyone has been successfull?
Hello,
Is there any one out there that has manage to configure Mailman to work with virtual domains in a Mac OS X Server 10.3.9 enviroment??
Anyone??
I've tryied every setup and read everything in the web about postfix and mailman and I just cant get it to work.
If there is anyone out there that could show me his configuration I would mostly greatfull.If I keep the aliases and the virtual-mailman hashes
in the postfix configuration I can have lists running
for local and virtual domains, right?
And we can have lists with the same name? And even
with the same name of the users in WG?
Once again, you can have the same name, be it for a user, be it for a list only ONCE per domain. A list and a user address are the same thing to postfix (they only difference is that a list adress is aliased to a mailman script). So they cannot exist twice in the same domain, but they can coexist in seperate VIRTUAL domains. Not in local host aliases.
In order to this works I must have in SA, Mail,
Advanced Settings, the virtual domain listed in the
local host alias?
Absolutely NOT! Virtual domains and local host aliases must be kept separate. -
Cannot change SQL 2008 R2 Service account from local System to any account
Windows 7 64 Bit Developer Edition of SQL Server 2008 R2
Successfully changed SQL Server Agent, SQL Server Reporting Services, SQL Analysis Services, SQL Server Integeration Services and SQL Full-Text Filter Daemon Launcher from Local System Account to Domain account. Howerver, I cannot change
the SQL Server Account. The SQL Server Configuration Manager generates the below error:
WMI Provider ERROR (in window title bar)
Big red X followed by "The parameter is incorrect. [0x80070057].
I have tried many things with no luck:
Tried using a different local administrator account
Tried putting the Domain account I want to change to in the local admin group
Tried adding the Domain account I want to change to in all of the SQL created local groups
I think im going to have to reinstall to change the account. What up!@!!
-thanks for any help in advance. Its probably something dumb i did or did not do.
scottPlease try:
Open SQL Server service's property dialog in SQL Server Configuration Manager.
Select "This account", and then click "Browser".
Enter you domain account and then click "Check Names"
Back to property dialog and input the password
Please let me know if the issue persists.
Best Regards
Alex Feng | Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
How to join to virtual domain from windows 8.1 host ??
Hi there
does it possible to join to virtual domain from windows 8.1 host or not ??
I installed windows 8.1 on my system as host windows and then enable windows 8.1 hyper-v and installed windows server 2012 r2 and installed active directory domain service
now I want to join to this domain from my windows 8.1 but I can't . I create a user in active directory users and comupers and do it's DNS but can't complete .
give me this Error that may be the domain name is not correct or the user name or password is incorrect
please help me how can I join to virtual domain from windows 8.1 host in my pc ??
thanks
Regards :
Raha
whit the best regard : RahaYes, you can.
You will need to configure the virtual network switch as either internal or external.
Then, you'll need to specify the IP address of the virtual Domain Controller as a DNS Server on the Windows 8.1 device. -
Windows Time "Allowing" the OS Kernel to sync to CMOS clock after 24H of no valid time sync
Hello,
I have been observing the following scenario with the following environment:
Windows 2008 Server R2
Not part of a domain
CMOS always clock drifted and not sync'd from the OS NTP Aware time.
1. Assume Windows Time has a problem syncing with a time source and produces the following when asked "w32tm /query /status /verbose":
Leap Indicator: 0(no warning)
Stratum: 3 (secondary reference - syncd by (S)NTP)
Precision: -6 (15.625ms per tick)
Root Delay: 0.2028500s
Root Dispersion: 7.8420074s
ReferenceId: 0x413738CE (source IP: 65.55.56.206)
Last Successful Sync Time: 2/1/2014 2:33:18 PM
Source: time.windows.com,0x9
Poll Interval: 10 (1024s)
Phase Offset: -0.0260539s
ClockRate: 0.0155992s
State Machine: 2 (Sync)
Time Source Flags: 0 (None)
Server Role: 0 (None)
Last Sync Error: 2 (The computer did not resync because only stale time data was
available.)
Time since Last Good Sync Time: 85499.5378040s
2. When "Time since Last Good Sync Time" arrives at the value 86400 (24H) an event log message such as the following is registered:
The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize with a time source. If the
local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time events for more details.
Run 'w32tm /resync' to force an instant time synchronization.
3. If the debug log of windows time was enabled with all the events (0-300) using "w32tm /debug .." The following records can be found in the log at the time:
- W32TmServiceMain: timeout
- ClockDispln GoUnsyncd: SetUnsync: LI:3 S:0 RDl:2184500 RDs:78611726 TSF:0x0
ReleaseClock2CMOS
- Logging warning: The time service has not synchronized the system time for 86400 seconds because none of the time service providers provided a usable time stamp. The time service will not update the local system time until it is able to synchronize
with a time source. If the local system is configured to act as a time server for clients, it will stop advertising as a time source to clients. The time service will continue to retry and sync time with its time sources. Check system event log for other W32time
events for more details. Run 'w32tm /resync' to force an instant time synchronization.
- W32TmServiceMain: waiting 642.223s
4. When the above occurs, we have observed that the OS Kernel would begin syncing to the underlying CMOS clock when they are different from each other in more than 60 seconds. The sync would occur on the next "sync point" which will arrive. A "Sync
point" is the end of a 60 minute cycle, counting from boot time and repeating.
Note: The CMOS clock could be off in more then 60 seconds for example when it's battery is dead, or on a virtualized environment under some conditions. (If anyone is interested in more details, please ask in the comment)
My Questions:
a. Parts of this behavior are well documented - can anyone confirm my analysis of the situation is correct?
b. Does anyone have knowledge of the term "ReleaseClock2CMOS" which appears in the Windows Time log? What exactly does it mean?
c. Under which conditions will the kernel avoid syncing to an underlying 60 seconds-off CMOS clock? Under which conditions will it sync (aside from what i described)?
Any info would be appreciated.Hi,
Thank you for your question.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.
Jeremy Wu
TechNet Community Support -
10.4.3 Local Host Aliases vs. Locally Hosted Virtual Domains
We had been running 10.4.1 for about eight months with no problems.
1) Under the Local Host Aliases setting in Server Admin (Mail, Settings, Advanced. Hosting) we had only "localhost" listed. All the other virtual domains we hosted email for were listed under Locally Hosted Virtual Domains.
2) We added all mail users via WGM and only listed one shortname without the "@domainname.com" suffix. I.E. "user1".
3) All mail account aliases are handled by editing the /etc/postfix/virtualaliasmaps.
A few weeks ago, we upgraded to 10.4.3. All mail was being rejected with an unknown user message. Checking forums around the net, we saw a post which suggested that all domains previously listed only under Locally Hosted Virtual Domains should also be added under Local Host Aliases for 10.4.3 via Server Admin.
We did this and all mail began working OK as before the upgrade. However we are getting log entry warnings everytime an email is processed:
postfix/trivial-rewrite[3921]: warning: do not list domain oneofourdomains.com in BOTH mydestination and virtualmailboxdomains
I'd like to straighten this out so everybody is happy and no more log warnings occur.
However, we don't want to:
1) remove the virtual domains from the Locally Hosted Virtual Domains entries and have them only under Local Host Aliases since there are mail aliases with the same name under different domains, and
2) we don't want to have to go into WGM and add a domain suffix to each shortname
Does anyone know what changed between 10.4.1 and 10.4.3 and why? More importantly, how do we best go about correcting this situation. Or is this an Apple bug that will be fixed in the future and we can live with the log warnings until then?
We've searched all the posts in different forums and haven't seen anything that addresses this problem directly.
Thanks in advance for your help.
DonWe had been running 10.4.1 for about eight months with no problems.
1) Under the Local Host Aliases setting in Server Admin (Mail, Settings, Advanced. Hosting) we had only "localhost" listed. All the other virtual domains we hosted email for were listed under Locally Hosted Virtual Domains.
2) We added all mail users via WGM and only listed one shortname without the "@domainname.com" suffix. I.E. "user1".
3) All mail account aliases are handled by editing the /etc/postfix/virtualaliasmaps.
A few weeks ago, we upgraded to 10.4.3. All mail was being rejected with an unknown user message. Checking forums around the net, we saw a post which suggested that all domains previously listed only under Locally Hosted Virtual Domains should also be added under Local Host Aliases for 10.4.3 via Server Admin.
We did this and all mail began working OK as before the upgrade. However we are getting log entry warnings everytime an email is processed:
postfix/trivial-rewrite[3921]: warning: do not list domain oneofourdomains.com in BOTH mydestination and virtualmailboxdomains
I'd like to straighten this out so everybody is happy and no more log warnings occur.
However, we don't want to:
1) remove the virtual domains from the Locally Hosted Virtual Domains entries and have them only under Local Host Aliases since there are mail aliases with the same name under different domains, and
2) we don't want to have to go into WGM and add a domain suffix to each shortname
Does anyone know what changed between 10.4.1 and 10.4.3 and why? More importantly, how do we best go about correcting this situation. Or is this an Apple bug that will be fixed in the future and we can live with the log warnings until then?
We've searched all the posts in different forums and haven't seen anything that addresses this problem directly.
Thanks in advance for your help.
Don
Maybe you are looking for
-
THERE IS NO SOLUTION TO MULTIPLE iPODS ON ONE COMPUTER!
Hello, This is a very common problem for those of us who belived that iPods were easy to connect to computers. The first iPod was, so why can't I just connect another? Well...you can. It just takes HOURS. Last night, I spent over 4 hours trying to ge
-
How do I use the same pictures for all desktops
I am trying to use the same folder of picture across all my desktops. It seems that every desktop I have to go in to preferences and click the same thing over and over. Is there a way to do it once and apply it across all desktops?
-
Is there any way to find SHMMAX used by the system? sysdef is not useful.
Since the SHMMAX is obsolete we could not set it. Also we are not able to find a way to current value that is used by system for SHMMAX(sysdef is not giving any value). Is there any other way to find out it's current value?
-
How to use a custom css with a ditamap?
I'm still trying to get to grips with some DITA Frame basics and another piece of info that I would like to have is how to get the ditamap to use a custom css when it is output to xhtml with the DITA OT. Is there any simple non-super-techie way to do
-
My computer don't recognizes Air Port Extreme
I saw some similar posts here, tried some of the solutions but the fact is that after several airport restarts, hard resets, factory default settings restarts, all I get is the " Airport Utility was unable to find any Airport wireless devices" messag