Time sync issues

2013-01-14 Thread kz20fl
Quick brainstorm requiredwhat's the most common issues you'd expect in a Windows/AD environment if some servers have incorrect time settings? Obviously AD replication and logging inconsistencies spring to mind...just looking for a few to flesh out a blog post that deals with preventing

Re: Time sync issues

2013-01-14 Thread Kurt Buff
On Mon, Jan 14, 2013 at 12:49 PM, kz2...@googlemail.com wrote: Quick brainstorm requiredwhat's the most common issues you'd expect in a Windows/AD environment if some servers have incorrect time settings? Obviously AD replication and logging inconsistencies spring to mind...just

RE: Time sync issues

2013-01-14 Thread Merker, Michael R
. -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Monday, January 14, 2013 4:13 PM To: NT System Admin Issues Subject: Re: Time sync issues On Mon, Jan 14, 2013 at 12:49 PM, kz2...@googlemail.com wrote: Quick brainstorm requiredwhat's the most common issues you'd

RE: Time sync issues

2013-01-14 Thread Webster
] Subject: RE: Time sync issues Kerberos authentication fails if time drifts too far off and you lose access to network resources, such as shares. The tolerance for time drift varies with server editions. I think Server 2003 had a 5 minute drift tolerance and I think Server 2008 has a 10

RE: Time sync issues

2013-01-14 Thread Merker, Michael R
] Sent: Monday, January 14, 2013 6:46 PM To: NT System Admin Issues Subject: RE: Time sync issues That is not a 100% accurate statement. http://blogs.technet.com/b/askds/archive/2012/08/24/friday-i-mean-saturday-mail-sack-very-wordy-edition.aspx •The semi-myth of Kerberos time skew Thanks

RE: Time sync

2013-01-09 Thread Ken Schaefer
as well, without having to over provision to start with. Cheers Ken From: Ken Cornetet [mailto:ken.corne...@kimball.com] Sent: Wednesday, 9 January 2013 1:29 AM To: NT System Admin Issues Subject: RE: Time sync We use SCOM to monitor everything, and we have some homegrown stuff on top of that. So

RE: Time sync

2013-01-08 Thread Ken Cornetet
. Management can worry about the explosion of disk costs. From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Monday, January 07, 2013 11:21 PM To: NT System Admin Issues Subject: RE: Time sync Seriously? Are you an ITIL shop? Do you not have capacity management plans and systems/tools in place

RE: Time sync

2013-01-08 Thread Ken Schaefer
[mailto:ken.corne...@kimball.com] Sent: Wednesday, 9 January 2013 1:29 AM To: NT System Admin Issues Subject: RE: Time sync We use SCOM to monitor everything, and we have some homegrown stuff on top of that. So, we do monitor. However, what we saw in the early days of virtualization

RE: Time sync

2013-01-07 Thread Ken Cornetet
Lol, how many times do you need 64 vCPUs or 4TB of guest Ram versus needing to extend a disk? From: Ken Schaefer [mailto:k...@adopenstatic.com] Sent: Friday, January 04, 2013 8:50 PM To: NT System Admin Issues Subject: RE: Time sync Can ESX support 64 vCPUs or 4TB RAM per guest yet? Or 64

Re: Time sync

2013-01-07 Thread Michael Leone
On Mon, Jan 7, 2013 at 8:31 AM, Ken Cornetet ken.corne...@kimball.com wrote: Lol, how many times do you need 64 vCPUs or 4TB of guest Ram versus needing to extend a disk? I run VMware ESXi 5.0, and I know I have had to extend a disk any number of times. And Win2008 makes extending the boot disk

RE: Time sync

2013-01-07 Thread Ken Cornetet
HyperV users aren't howling about this. -Original Message- From: Michael Leone [mailto:oozerd...@gmail.com] Sent: Monday, January 07, 2013 9:43 AM To: NT System Admin Issues Subject: Re: Time sync On Mon, Jan 7, 2013 at 8:31 AM, Ken Cornetet ken.corne...@kimball.com wrote: Lol, how many

RE: Time sync

2013-01-07 Thread Michael B. Smith
] Sent: Monday, January 7, 2013 10:06 AM To: NT System Admin Issues Subject: RE: Time sync We are running ESX 5. To conserve SAN storage, we provision virtuals with the bare minimum needed disk space because it is so easy to extend disks later (extend the VMDK in VMWare, extend in Windows, done

Re: Time sync

2013-01-07 Thread Andrew S. Baker
features like 4TB of guest RAM. And, I also wonder why HyperV users aren't howling about this. -Original Message- From: Michael Leone [mailto:oozerd...@gmail.com] Sent: Monday, January 07, 2013 9:43 AM To: NT System Admin Issues Subject: Re: Time sync On Mon, Jan 7, 2013 at 8:31 AM, Ken

RE: Time sync

2013-01-07 Thread Ken Cornetet
days, and I ran into this problem a few times. -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, January 07, 2013 10:28 AM To: NT System Admin Issues Subject: RE: Time sync Because the overhead associated with dynamic disks in Hyper-V v3

Re: Time sync

2013-01-07 Thread Michael Leone
On Mon, Jan 7, 2013 at 10:33 AM, Andrew S. Baker asbz...@gmail.com wrote: You do know you can thin provision in both VMWare and HyperV, right? Thus, you can stipulate that a disk have a max size of 200GB, but if you're only using 50GB, it will only be 50GB in size. I never use think disks,

Re: Time sync

2013-01-07 Thread Andrew S. Baker
Admin Issues Subject: RE: Time sync Because the overhead associated with dynamic disks in Hyper-V v3 is in the very low single digits. We don't spend any time on this process, thin provisioning still works seamlessly, and we get on with our lives. :) -Original Message- From: Ken

RE: Time sync

2013-01-07 Thread Ken Cornetet
, even if you script it up. From: Andrew S. Baker [mailto:asbz...@gmail.com] Sent: Monday, January 07, 2013 12:08 PM To: NT System Admin Issues Subject: Re: Time sync Yes, over subscribing can be an issue if you don't manage your capacity properly. It hasn't proved to be an issue in any

Re: Time sync

2013-01-07 Thread Andrew S. Baker
[mailto:asbz...@gmail.com] *Sent:* Monday, January 07, 2013 12:08 PM *To:* NT System Admin Issues *Subject:* Re: Time sync ** ** Yes, over subscribing can be an issue if you don't manage your capacity properly. ** ** It hasn't proved to be an issue in any of the environments where I have

RE: Time sync

2013-01-07 Thread Ken Schaefer
that VMWare doesn't have. That statement is patently untrue. That was the point I was trying to make. Cheers Ken From: Ken Cornetet [mailto:ken.corne...@kimball.com] Sent: Tuesday, 8 January 2013 12:31 AM To: NT System Admin Issues Subject: RE: Time sync Lol, how many times do you need 64 vCPUs

RE: Time sync

2013-01-07 Thread Ken Schaefer
System Admin Issues Subject: RE: Time sync How do you manage your capacity properly? I'm not being facetious - I really want to know since it looks like we are switching to HyperV. Microsoft's recommendation is to create thin disks for more than you ever think you need. Then, when creating the OS

Re: Time sync

2013-01-04 Thread Eric Wittersheim
an alternative to W32Time. NIST has gathered a list of time sync software. QUESTION: has anyone on the list used (and would recommend) anything on that list to fix the “record created prior to the call” situation? ( http://www.nist.gov/pml/div688/grp40/softwarelist.cfm) ** ** Thank you

RE: Time sync

2013-01-04 Thread Ken Cornetet
System Admin Issues Subject: Re: Time sync We run the product from Meinberg. It works very well except on HV guests. On Fri, Jan 4, 2013 at 8:10 AM, Richard McClary richard.mccl...@aspca.orgmailto:richard.mccl...@aspca.org wrote: Greetings! I'm sure I and many others have asked

RE: Time sync

2013-01-04 Thread Kennedy, Jim
time (pun intended) we had a time sync issue. From: Richard McClary [mailto:richard.mccl...@aspca.org] Sent: Friday, January 04, 2013 9:11 AM To: NT System Admin Issues Subject: Time sync Greetings! I'm sure I and many others have asked this (but are still stumped). Ken S's reply yesterday

Re: Time sync

2013-01-04 Thread Christopher Bodnar
The Guardian Life Insurance Company of America www.guardianlife.com From: Richard McClary richard.mccl...@aspca.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Date: 01/04/2013 09:11 AM Subject:Time sync Greetings! I’m sure I and many others have

RE: Time sync

2013-01-04 Thread Chinnery, Paul
Admin Issues Subject: RE: Time sync We run the Meinberg NTP port as well. We will soon start migrating from VMWare (where the Meinberg NTP port works great) to HyperV. Care to elaborate on what you mean by except on HV guests? From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] Sent: Friday

Re: Time sync

2013-01-04 Thread Steve Kradel
referenced above essentially says to go find an alternative to W32Time. NIST has gathered a list of time sync software. QUESTION: has anyone on the list used (and would recommend) anything on that list to fix the “record created prior to the call” situation? (http://www.nist.gov/pml/div688

RE: Time sync

2013-01-04 Thread Ziots, Edward
To: NT System Admin Issues Subject: RE: Time sync Slightly OT, Ken, but why are you moving away from VM? Cost or something else that HyperV gives you that VM doesn't? Paul Chinnery Network Admin Memorial Medical Center 231.845.2319 From: Ken Cornetet [mailto:ken.corne

RE: Time sync

2013-01-04 Thread Richard McClary
-Original Message- From: Steve Kradel [mailto:skra...@zetetic.net] Sent: Friday, January 04, 2013 10:32 AM To: NT System Admin Issues Subject: Re: Time sync How much time skew are we talking about here? While MSFT will only support w32tm accuracy within 1-2 seconds, in practice I

RE: Time sync

2013-01-04 Thread Free, Bob
...@zetetic.net] Sent: Friday, January 04, 2013 8:32 AM To: NT System Admin Issues Subject: Re: Time sync How much time skew are we talking about here? While MSFT will only support w32tm accuracy within 1-2 seconds, in practice I have found it to be stable within a tenth of a second or less, and would

RE: Time sync

2013-01-04 Thread Ken Cornetet
Subject: RE: Time sync I was thinking the same thing. Actually IMHO VM still does more than Hyper-V does... Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization ezi...@lifespan.orgmailto:ezi...@lifespan.org From: Chinnery, Paul [mailto:pa...@mmcwm.com] Sent: Friday

Re: Time sync

2013-01-04 Thread Eric Wittersheim
the Meinberg NTP port works great) to HyperV. Care to elaborate on what you mean by “except on HV guests”? ** ** *From:* Eric Wittersheim [mailto:eric.wittersh...@gmail.com] *Sent:* Friday, January 04, 2013 9:24 AM *To:* NT System Admin Issues *Subject:* Re: Time sync ** ** We run

Re: Time sync

2013-01-04 Thread Steve Kradel
Hmm, could be your VM host has the wrong time, and is jamming that bad time into its guests occasionally. Disable the host-guest time sync and, provided w32tm is set up properly, you may find everything is good. Also it wouldn't hurt to make sure the host has a solid time configuration

Re: Time sync

2013-01-04 Thread Steven Peck
...@zetetic.net wrote: Hmm, could be your VM host has the wrong time, and is jamming that bad time into its guests occasionally. Disable the host-guest time sync and, provided w32tm is set up properly, you may find everything is good. Also it wouldn't hurt to make sure the host has a solid time

Re: Time sync

2013-01-04 Thread Steven Peck
skra...@zetetic.net wrote: Hmm, could be your VM host has the wrong time, and is jamming that bad time into its guests occasionally. Disable the host-guest time sync and, provided w32tm is set up properly, you may find everything is good. Also it wouldn't hurt to make sure the host has

RE: Time sync

2013-01-04 Thread Bourque Daniel
timesource offset more then 100msec, It generate an e-mail alert. De : Steven Peck [mailto:sep...@gmail.com] Envoyé : 4 janvier 2013 16:25 À : NT System Admin Issues Objet : Re: Time sync Oh, I should mention the PBX gets time from the routers as well, etc. We

RE: Time sync

2013-01-04 Thread Ken Schaefer
. Hypervisors are almost commoditised, and will be within the next version or two. Cheers Ken From: Ken Cornetet [mailto:ken.corne...@kimball.com] Sent: Saturday, 5 January 2013 6:26 AM To: NT System Admin Issues Subject: RE: Time sync Cost. HyperV give something that VMWare doesn't? I laughed so hard I

Domain on Server 2003 Time Sync Question

2011-07-14 Thread Don Kuhlman
Hi folks. I've been asked to analyze the time sync setup for our domain at the new job.  The domain is on windows 2003 servers.   It's been a while since I've had to do this so I did some research - http://support.microsoft.com/kb/816042 , http://www.windowsnetworking.com/articles_tutorials

RE: Domain on Server 2003 Time Sync Question

2011-07-14 Thread Michael B. Smith
[mailto:drkuhl...@yahoo.com] Sent: Thursday, July 14, 2011 10:10 AM To: NT System Admin Issues Subject: Domain on Server 2003 Time Sync Question Hi folks. I've been asked to analyze the time sync setup for our domain at the new job. The domain is on windows 2003 servers. It's been a while since I've had

Re: Domain on Server 2003 Time Sync Question

2011-07-14 Thread Don Kuhlman
it seems a bit harder to map things out and troubleshoot.   Don From: Michael B. Smith mich...@smithcons.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Thursday, July 14, 2011 9:15 AM Subject: RE: Domain on Server 2003 Time Sync Question Bah humbug.   http

RE: Domain on Server 2003 Time Sync Question

2011-07-14 Thread Michael B. Smith
Yet another good reason to upgrade. :) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Don Kuhlman [mailto:drkuhl...@yahoo.com] Sent: Thursday, July 14, 2011 10:38 AM To: NT System Admin Issues Subject: Re: Domain on Server 2003 Time Sync Question

Win2008 AD Time Sync in an isolated virtual environment - /NOSYNC?

2011-06-02 Thread Mike Leone
I have my virtual copy of my AD structure just about all ready to go. The DCs are on an isolated vSwitch on VMware ESX 4.1. The last step is to set up time sync, I think. According to http://www.sole.dk/post/how-to-configure-your-virtual-domain-controllers-and-avoid-simple-mistakes-with-resulting

Workstation time sync

2010-02-09 Thread James Kerr
The time was wrong on a PDC for one of our domains, about 3 minutes off. We have since changed the NTP server data on that server and it has the correct time now. Do I really have to wait 8 hours before the workstations sync to the correct time? Is there a way to make them sync sooner? Other

Re: Workstation time sync

2010-02-09 Thread James Rankin
use psexec and a list of computers in a text file to send the command *w32tm /resync* On 9 February 2010 15:53, James Kerr cluster...@gmail.com wrote: The time was wrong on a PDC for one of our domains, about 3 minutes off. We have since changed the NTP server data on that server and it has

RE: Workstation time sync

2010-02-09 Thread Alverson, Tom (Xetron)
What happens when you run: w32tm /resync From: James Kerr [mailto:cluster...@gmail.com] Sent: Tuesday, February 09, 2010 10:54 AM To: NT System Admin Issues Subject: Workstation time sync The time was wrong on a PDC for one of our domains, about 3 minutes off. We have since

Re: Workstation time sync

2010-02-09 Thread James Kerr
Thats a good idea, thanks for that. James - Original Message - From: James Rankin To: NT System Admin Issues Sent: Tuesday, February 09, 2010 10:51 AM Subject: Re: Workstation time sync use psexec and a list of computers in a text file to send the command w32tm /resync

RE: Domain Controllers time sync software

2008-11-19 Thread Ziots, Edward
-639-3505 MCSE, MCP+I, ME, CCA, Security +, Network + From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 18, 2008 1:31 PM To: NT System Admin Issues Subject: RE: Domain Controllers time sync software +1 Did that 5 years ago and have never

RE: Domain Controllers time sync software

2008-11-19 Thread Juned Shaikh
Thanks for very informative string of suggestions! Greatly appreciated. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~

Domain Controllers time sync software

2008-11-18 Thread Juned Shaikh
What is the time-sync software hardware that the list uses? In our environment - for FW reasons the sync with default time sysnc are not working and we are in the process of buying some hardware appliacne with can provide time services. In the meantime, does anyone has use some software option

Re: Domain Controllers time sync software

2008-11-18 Thread Klint Price - ArizonaITPro
is the time-sync software hardware that the list uses? In our environment - for FW reasons the sync with default time sysnc are not working and we are in the process of buying some hardware appliacne with can provide time services. In the meantime, does anyone has use some software option which can

Re: Domain Controllers time sync software

2008-11-18 Thread MarvinC
software will do the trick? Both routes will most likely require FW modifications, whether you have the DC do time on its own, or point it to a different internal time server on the network. Klint Juned Shaikh wrote: What is the time-sync software hardware that the list uses? In our

RE: Domain Controllers time sync software

2008-11-18 Thread Troy Meyer
sync software What is the time-sync software hardware that the list uses? In our environment - for FW reasons the sync with default time sysnc are not working and we are in the process of buying some hardware appliacne with can provide time services. In the meantime, does anyone has use some

Re: Domain Controllers time sync software

2008-11-18 Thread Klint Price - ArizonaITPro
I think both Troy and Marvin are correct. It sounds like Juned does not have FW rules in place to allow time sync to work directly from his DC. Yes, he should use W32Time as Troy suggests, and should point to an edge device (or other device that has a time service running on it) as Marvin

RE: Domain Controllers time sync software

2008-11-18 Thread Free, Bob
, 2008 9:05 AM To: NT System Admin Issues Subject: Domain Controllers time sync software What is the time-sync software hardware that the list uses? In our environment - for FW reasons the sync with default time sysnc are not working and we are in the process of buying some hardware appliacne with can

RE: Domain Controllers time sync software

2008-11-18 Thread Troy Meyer
Thanks Kurt. If all this IT stuff falls away, I smell a career for you in legal arbitration! -troy -Original Message- From: Klint Price - ArizonaITPro [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 18, 2008 9:47 AM To: NT System Admin Issues Subject: Re: Domain Controllers time sync

RE: Domain Controllers time sync software

2008-11-18 Thread Kennedy, Jim
+1 Did that 5 years ago and have never touched the time service since. From: MarvinC [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 18, 2008 12:25 PM To: NT System Admin Issues Subject: Re: Domain Controllers time sync software Do you have Cisco on the edge? If so synch the PDC emulator

Re: Domain Controllers time sync software

2008-11-18 Thread Ben Scott
On Tue, Nov 18, 2008 at 12:10 PM, Klint Price - ArizonaITPro [EMAIL PROTECTED] wrote: If the default is not working, why do you think the additional software will do the trick? You can buy hardware time sources. For example, some computer-connected GPS receivers can also provide a time

Re: Domain Controllers time sync software

2008-11-18 Thread Kurt Buff
On Tue, Nov 18, 2008 at 12:59 PM, Ben Scott [EMAIL PROTECTED] wrote: On Tue, Nov 18, 2008 at 12:10 PM, Klint Price - ArizonaITPro [EMAIL PROTECTED] wrote: If the default is not working, why do you think the additional software will do the trick? You can buy hardware time sources. For

Re: Domain Controllers time sync software

2008-11-18 Thread Ben Scott
On Tue, Nov 18, 2008 at 4:40 PM, Kurt Buff [EMAIL PROTECTED] wrote: No IP connection/ exposed API == Needs special driver. Quite possibly. I never said it wouldn't need a driver, just that it wouldn't need a network connection. :) Some of those GPS gadgets hook up via RS-232 serial port,

Re: Domain Controllers time sync software

2008-11-18 Thread Kurt Buff
On Tue, Nov 18, 2008 at 2:08 PM, Ben Scott [EMAIL PROTECTED] wrote: On Tue, Nov 18, 2008 at 4:40 PM, Kurt Buff [EMAIL PROTECTED] wrote: Bad juju. Depends on the environment. In some situations, you're not allowed outside network connectivity, but loading software for a time source would be

Re: Domain Controllers time sync software

2008-11-18 Thread Kurt Buff
On Tue, Nov 18, 2008 at 2:40 PM, Ben Scott [EMAIL PROTECTED] wrote: On Tue, Nov 18, 2008 at 5:21 PM, Kurt Buff [EMAIL PROTECTED] wrote: As a point of curiosity - I'm assuming that there is some sort of internal switching going on with the NISP. The NISP (National Industrial Security Program)

Re: Domain Controllers time sync software

2008-11-18 Thread Ben Scott
On Tue, Nov 18, 2008 at 5:21 PM, Kurt Buff [EMAIL PROTECTED] wrote: As a point of curiosity - I'm assuming that there is some sort of internal switching going on with the NISP. The NISP (National Industrial Security Program) is just the jurisdiction most private industry contractors doing

RE: Time Sync to outside NTP server in NT4

2001-09-28 Thread Wong, Joe
w32time.exe is also available free from microsoft and handles NTP sources ... Joe -Original Message- From: Luberti, Carl [mailto:[EMAIL PROTECTED]] Sent: Friday, September 28, 2001 11:08 AM To: NT System Admin Issues Subject: RE: Time Sync to outside NTP server in NT4 You'll need

RE: Time Sync to outside NTP server in NT4

2001-09-28 Thread Andrew Baker
W32Time See the following: http://www.ultratech-llc.com/KB/?File=TimeSync.TXT - ASB -Original Message- From: Jesse Rink [mailto:[EMAIL PROTECTED]] Sent: Friday, September 28, 2001 12:27 PM To: NT System Admin Issues Subject: Time Sync to outside NTP server in NT4 I know I can

RE: Time Sync to outside NTP server in NT4

2001-09-28 Thread Sauer, Steve
Message- From: Andrew Baker [mailto:[EMAIL PROTECTED]] Sent: Friday, September 28, 2001 11:52 AM To: NT System Admin Issues Subject: RE: Time Sync to outside NTP server in NT4 W32Time See the following: http://www.ultratech-llc.com/KB/?File=TimeSync.TXT - ASB -Original Message

Time Sync to outside NTP server in NT4

2001-09-28 Thread Jesse Rink
I know I can get my NT workstation to sync time with my PDC or other server when specified through a logon script... How do I get my PDC to sync with a NTP server outside my network? Using NET TIME only seems to allow netbios names for the destination computer and not FQDNs. Any idea? Thanks

Re: Time Sync to outside NTP server in NT4

2001-09-28 Thread The Realist's Mail
I have a perl script that I run from sql executive as a job to sync time with bitsy.mit.edu Jim Want to unsub? Do that here: http://www.w2knews.com/rd/rd.cfm?id=unsub Need a good FAQ? Try this one first: http://www.ultratech-llc.com/KB/