> Has this KBB made the thread yet? Good point. That KB is actually the way I have always done it on my forest root PDCe's (manually in the registry) All my forests keep good time and follow the domain hierarchy well so I know for sure that works.
There is conflicting documentation from MS and on non-MS sites so it's easy to see why people approach it with trepidation. There's also TechNet article that specifies how to do it with w32tm on the forest root PDCe, as well as actually test it- Configure the Windows Time service on the PDC emulator Windows Time Service http://technet.microsoft.com/en-us/library/cc786897.aspx w32tm /config /manualpeerlist:peers /syncfromflags:manual /reliable:yes /update To change the Windows Time service configuration on the previous PDC emulator http://technet.microsoft.com/en-us/library/cc738042.aspx w32tm /config /syncfromflags:domhier /reliable:no /update The /syncfromflags:domhier tells it to behave as a member which is why I took issue with the previous advice. -----Original Message----- From: Troy Meyer [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2008 10:42 AM To: NT System Admin Issues Subject: RE: Which is the better way Half way through the week, just keep telling yourself. Has this KBB made the thread yet? Perhaps a supplement to the EZ instructos http://support.microsoft.com/kb/816042 One thing I noticed right away when I followed the above instructions is that successful time syncs show up in the event logs and I don't remember them doing that previously when we used SNTP, but its been a while. -Troy -----Original Message----- From: Jon Harris [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2008 10:37 AM To: NT System Admin Issues Subject: Re: Which is the better way Yes that is the one I used sorry for the typo. It is a long day and not going very well at the moment. Jon On Wed, Aug 27, 2008 at 1:35 PM, Kurt Buff <[EMAIL PROTECTED]> wrote: Uh, do you mean us.pool.ntp.org <http://us.pool.ntp.org/> instead? On Wed, Aug 27, 2008 at 10:22 AM, Jon Harris <[EMAIL PROTECTED]> wrote: > What I am trying to do is reset the pDCe to use us.pool.net.org <http://us.pool.net.org/> as the > primary time source. This would be inaddition to several time sources at > the University that seem to have issues off and on. Since I was at it I was > also going to set all my Workgroup servers to use the same list of time > sources as I do not want them to be any less accurate nor cause myself any > issues down the road to remote access. > > When you "view" the list of sntp servers with the /querysntp command of net > time you get the list of time servers being used by the server. If you > change the list using w32tm /manualpeerlist:"list of time servers" you get > the same list. Unless I have done something wrong it appears the command > structure that Edward gave me did exactly what I wanted. If something is > wrong I would love to know about it before it bites me. > > Thank you, > > Jon > > On Wed, Aug 27, 2008 at 12:27 PM, Free, Bob <[EMAIL PROTECTED]> wrote: >> >> I'm thinking we (at least Ken and I) were misunderstanding what you were >> trying to say, particularly when you said "You don't use Net Time to do your >> synchronization? " >> >> >> >> When I hear you say "reset" it now sounds like you are using net time to >> change the configuration, not the synchronization mechanism? Totally >> different question J >> >> >> >> >> >> >> >> From: Jon Harris [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, August 27, 2008 9:00 AM >> To: NT System Admin Issues >> Subject: Re: Which is the better way >> >> >> >> True and I have switched but it has been a long time since I had to reset >> anything like time on my DC's. I might even have used w32tm last time for >> all I remember. >> >> >> >> Jon >> >> On Wed, Aug 27, 2008 at 11:31 AM, Free, Bob <[EMAIL PROTECTED]> wrote: >> >> Still begs the same question, why use net time on anything newer than a >> wintendo? W2K's w32time works just fine. It was the first time we actually >> had a decent native time service with registry based configuration and a >> management interface. That said, regardless of its quirks, even in the NT >> era the old timeserv was a quantum leap above net time when you didn't have >> AD's hierarchical structure and kerberos time requirements. >> >> >> >> From: Jon Harris [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, August 27, 2008 5:28 AM >> >> To: NT System Admin Issues >> >> Subject: Re: Which is the better way >> >> >> >> Sorry to say this but I got use to it when doing Win 2000 machines. >> >> >> >> Jon >> >> On Wed, Aug 27, 2008 at 8:19 AM, Ken Schaefer <[EMAIL PROTECTED]> >> wrote: >> >> ?!? >> >> >> >> Why would you use net time is a better question... >> >> >> >> Cheers >> >> Ken >> >> >> >> From: Jon Harris [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, 27 August 2008 10:10 PM >> >> To: NT System Admin Issues >> >> Subject: Re: Which is the better way >> >> >> >> Never mind just a differnet way to skin the cat. >> >> >> >> Jon >> >> On Wed, Aug 27, 2008 at 7:56 AM, Jon Harris <[EMAIL PROTECTED]> wrote: >> >> You don't use Net Time to do your synchronization? Why not? >> >> >> >> Jon >> >> On Wed, Aug 27, 2008 at 7:53 AM, Ziots, Edward <[EMAIL PROTECTED]> >> wrote: >> >> W32tm /config /syncfromflags:DOMHIER >> >> W32tm /config /update >> >> W32tm /resync /rediscover. >> >> >> >> Z >> >> >> >> Edward E. Ziots >> >> Network Engineer >> >> Lifespan Organization >> >> MCSE,MCSA,MCP,Security+,Network+,CCA >> >> Phone: 401-639-3505 >> >> ________________________________ >> >> From: Jon Harris [mailto:[EMAIL PROTECTED] >> Sent: Wednesday, August 27, 2008 7:52 AM >> To: NT System Admin Issues >> Subject: Which is the better way >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
