We used xntpd on all our 4.0 domain controllers and had them at Stratum 2. It synched extremely well to our Stratum 1 systems and made it easy to see the hierarchy throughout the internal time network from either the W32 or *NIX boxes using the standard NTP stuff like ntpdate,ntpq, ntpdc, ntptrace etc. It worked awesome. We tested and considered using it when we went to AD and W2K but W32time had matured enough to hold ~5-50ms accuracy across the DC's and W32time and NTP didn't play nice on the same box when you wanted to run in NT5DS mode so we just dropped it.
I'm *really* pleased with the improvements in W32time/w32tm in 2003/XP, especially the w32tm -monitor function and the vastly improved manageability through GPO's. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ken Cornetet Sent: Friday, February 18, 2005 6:39 AM To: [email protected] Subject: RE: [ActiveDir] Time sync on non-domain W2K server? There is a windows port of the standard NTP code available at http://www.five-ten-sg.com/ And http://norloff.org/ntp/ I used the former on many servers back in the nt4 days with no problems. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charlie Kaiser Sent: Thursday, February 17, 2005 4:56 PM To: [email protected] Subject: RE: [ActiveDir] Time sync on non-domain W2K server? Ah. There we go. The w32tm -once showed a sync. Now the next question is: will the standalone server automatically sync with the listed time source or will I have to perform manual/scripted syncs? I know it's automatic within an AD structure, but what I've been reading doesn't address non-domain scenarios... Thanks much! ********************** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ********************** > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Bob Free > Sent: Thursday, February 17, 2005 12:26 PM > To: [email protected] > Subject: Re: [ActiveDir] Time sync on non-domain W2K server? > > When you run Net Time \\somemachine /set you are using the old LanMan > NetTOD api to locate an authoritative time source which doesn't work > because you aren't in the domain and you have already told the box to > use SNTP with the /setsntp arg. > > You want to use w32tm to test the SNTP function. Stop W32Time service > and try w32tm -once and observe the console output. The arguments have > changed in 2003 and XP and I don't have a W2K box handy but w32tm /? > will give you all the args. > > It is confusing because you can use Net Time with the /setsntp or > /querysntp but all you are doing there is making the registry setting > or reading it. > > > > On Thu, 17 Feb 2005 11:45:42 -0800, Charlie Kaiser > <[EMAIL PROTECTED]> wrote: > > Doesn't work. "System error 5 has occurred. Access is denied." The > > Cisco servers are not in the domain, and the DCs won't allow > > communications from outside. If I do a runas with domain > > credentials, I can make it > work, but I was > > hoping for a more elegant solution. I don't like doing > runas with domain > > pwds in a file somewhere. It's my biggest beef with runas... If I > > try to do the same to the IP address of our switch, it says "network > > path not found". You'd think there would be a way to allow a > > stand-alone > server to synch > > with an external time source... > > > > ********************** > > Charlie Kaiser > > MCSE, CCNA > > Systems Engineer > > Essex Credit / Brickwalk > > 510 595 5083 > > ********************** > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of > Al Garrett > > > Sent: Thursday, February 17, 2005 11:08 AM > > > To: [email protected] > > > Subject: RE: [ActiveDir] Time sync on non-domain W2K server? > > > > > > Seems to me, if the Cisco servers can talk to the DC's via TCP/IP, > > > then you should be able to do a simple > > > > > > NET TIME \\<DCname> /SET /YES > > > > > > NET TIME \\<DCipaddress> ..... > > > > > > Make a batch file or run an AT job, anything that syncs them > > > periodically. > > > > > > > > > > > > -----Original Message----- > > > From: Creamer, Mark [mailto:[EMAIL PROTECTED] > > > Sent: Thursday, February 17, 2005 10:53 AM > > > To: [email protected] > > > Subject: RE: [ActiveDir] Time sync on non-domain W2K server? > > > > > > > > > Interesting...Charlie's message just popped up in my > inbox as well. > > > Looks like time sync is a current hot topic. Eagerly > awaiting thoughts > > > from the group. > > > > > > <mc> > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Charlie > > > Kaiser > > > Sent: Thursday, February 17, 2005 1:23 PM > > > To: [email protected] > > > Subject: [ActiveDir] Time sync on non-domain W2K server? > > > > > > I have a W2K3 AD domain. Gets its time synch from our > Cisco switch, > > > which gets time from outside. Usually works OK; hiccups once in a > > > while; no big deal. I've run into an interesting problem, though. > > > We have Cisco > > > VoIP phones, which display the time on the screen. A user > complained > > > because the time was about 6 minutes different between the phone > > > and her PC. I started looking into it, took care of a few things, > > > but came across something I can't resolve. Our Cisco Call Managers > (W2K servers > > > running Cisco call-handling apps) are not members of the > domain. Cisco > > > documentation says they should be stand-alone servers. I try and > > > use net time /setsntp:switchIPaddress or net time > > > /setsntp:PDCEname. Either one > > > works, but when I do a net time /set, it fails with "Could > > > not locate a > > > time-server". Q243574 explains that only the PDCe can so > an external > > > synch. So how do we get a stand-alone machine to set the time? > > > It's kind of important, because the phones get their time display > from the Call > > > Managers' OS time. Any ideas? Thanks! > > > > > > ********************** > > > Charlie Kaiser > > > MCSE, CCNA > > > Systems Engineer > > > Essex Credit / Brickwalk > > > 510 595 5083 > > > ********************** > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > > > > > > This e-mail transmission contains information that is > intended to be > > > confidential and privileged. If you receive this e-mail and you > > > are not a named addressee you are hereby notified that you are not > > > authorized to > > > read, print, retain, copy or disseminate this communication > > > without the > > > consent of the sender and that doing so is prohibited and may be > > > unlawful. Please reply to the message immediately by > informing the > > > sender that the message was misdirected. After replying, please > > > delete and otherwise erase it and any attachments from your > computer system. > > > Your assistance in correcting this error is appreciated. > Thank you. > > > Cintas Corporation. > > > > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
