{"id":4116,"date":"2013-09-07T20:51:28","date_gmt":"2013-09-08T04:51:28","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=4116"},"modified":"2013-09-08T14:12:47","modified_gmt":"2013-09-08T22:12:47","slug":"how-to-configure-your-windows-server-to-use-an-external-time-source","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/how-to-configure-your-windows-server-to-use-an-external-time-source\/","title":{"rendered":"How to Configure Your Windows Server to Use an External Time Source"},"content":{"rendered":"

Having the same time on all your Windows servers is extremely important. Microsoft Exchange, SQL Server, and Active Directory all rely on the Time Service (W32Time). The Kerberos authentication protocol in Windows also relies on the Time Service and if the time is out of sync on the servers, you can have some serious issues.<\/p>\n

By default, the Windows computers use the following hierarchy to synchronize time with the servers.<\/p>\n

    \n
  1. All client desktop computers synchronize time with the authenticating domain controller.<\/li>\n
  2. All member servers also synchronize time with the authenticating domain controller.<\/li>\n
  3. All domain controllers in a domain synchronize time with the primary domain controller (PDC) operations master.<\/li>\n
  4. All PDC operations masters in each domain synchronize time with the PDC operations master in the forest root domain.<\/li>\n<\/ol>\n

    Microsoft recommends that you configure the authoritative time server to obtain the time from a hardware source because when you configure the authoritative time server to sync with an Internet time source there is no authentication. However, there are pros and cons to both using a hardware source and an Internet time source. Organizations often choose to synchronize time with an Internet time source because it is free and convenient. Here’s how you can configure a Windows Server to use an external time source on the Internet.<\/p>\n

    Step 1 –\u00a0 Change the Server Type to NTP<\/strong><\/p>\n

      \n
    1. Start Registry Editor and go to the following location:
      \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\Parameters\\Type<\/li>\n
    2. Double-click Type and change the value to NTP<\/strong>.<\/li>\n
    3. Click OK.<\/li>\n<\/ol>\n

      Step 2 – Enable NTP Server<\/strong><\/p>\n

        \n
      1. Locate the following location in the registry:
        \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\TimeProviders\\NtpServer<\/li>\n
      2. Double-click Enabled, type 1<\/strong> and click OK.<\/li>\n<\/ol>\n

        Step 3 -Specify the Time Sources<\/strong><\/p>\n

          \n
        1. Go to the following location in the registry:
          \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\Parameters<\/li>\n
        2. Double-click NtpServer and enter the following:
          \nus.pool.ntp.org,0\u00d71<\/strong>
          \nYou can list more than one time sources here. Use spaces to separate them. The important thing to remember is to add ,0x1<\/strong> at the end of each DNS name. For more information check out Microsoft’s KB article 262680: A list of the Simple Network Time Protocol (SNTP) time servers that are available on the Internet.<\/a><\/li>\n
        3. Click OK.
          \n          \"\"<\/a><\/li>\n<\/ol>\n

          Step 4- Configure the Time Correction Settings<\/strong><\/p>\n

            \n
          1. Go to the following location in the registry:
            \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\Config\\MaxPosPhaseCorrection<\/li>\n
          2. Double-click MaxPosPhaseCorrection<\/strong> and enter a decimal value in seconds. For example, for 30 minutes type 1800, for one hour type 3600 and then click OK.<\/span><\/li>\n
          3. Go to the following key in the registry:
            \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\Config\\MaxNegPhaseCorrection<\/span><\/li>\n
          4. Double-click MaxNegPhaseCorrection<\/span> and enter a decimal value in seconds. For example, for 30 minutes type 1800, for one hour type 3600 and then click OK.<\/span><\/li>\n<\/ol>\n

            Step 5 -Modify the Poll Interval<\/strong><\/p>\n

              \n
            1. Go to the following location in the registry:
              \nHKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\W32Time\\TimeProviders\\NtpClient\\SpecialPollInterval<\/li>\n
            2. Double-click SpecialPollInterval and change the value to 900 and then click OK. This value sets the time in seconds so by setting it to 900 you are configuring the time server to poll every 15 minutes.<\/li>\n<\/ol>\n

              Step 6 – Restart Windows Time Service<\/strong><\/p>\n

                \n
              1. Go to the command prompt and type the following command.
                \nnet stop w32time && net start w32time<\/span><\/li>\n<\/ol>\n

                You just configured your server to automatically synchronize time with an Internet source. If you ever want to manually synchronize the time just type W32tm \/resync<\/strong> at the command prompt.<\/p>\n

                \"\"<\/a><\/p>\n

                \ufeff<\/div>\n

                I have tested this procedure successfully on Windows Server 2012 Datacenter, Windows Server 2008 R2 Enterprise and Windows Server 2003 R2 Enterprise. For more information and to configure the Windows time service to use an internal hardware clock, check out this KB article<\/a>.<\/p>\n

                \n

                Copyright \u00a92013 Zubair Alexander. All rights reserved.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

                Having the same time on all your Windows servers is extremely important. Microsoft Exchange, SQL Server, and Active Directory all rely on the Time Service (W32Time). The Kerberos authentication protocol in Windows also relies on the Time Service and if the time is out of sync on the servers, you can have some serious issues. […]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[43,44,34,11,38,30,65],"tags":[],"class_list":["post-4116","post","type-post","status-publish","format-standard","hentry","category-articles","category-internetweb","category-registry","category-tips-tricks","category-windows-2003","category-longhorn-server","category-windows-2012"],"aioseo_notices":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/4116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/comments?post=4116"}],"version-history":[{"count":0,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/4116\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/media?parent=4116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/categories?post=4116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/tags?post=4116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}