Sync your windows time with an External Time Source

The systems in my development network were always behind by 5 minutes.  I corrected the time on my domain server and my workstation every once in a while, but it would eventually go back to being a few minutes late.

I didn't mind much when I didn't have meetings to go to, but every once in a while, I do have meetings.

I always found myself scrambling even more because my inaccurate system time.

So, I found this article on configuring your windows time service.

http://www.windowsnetworking.com/articles_tutorials/configuring-windows-time-service.html

The above article is the best article I found regarding syncing windows time.

Summarily, it states that the windows time service was set up to ensure your systems have synchronized times.

Time can be synched with an internal hardware clock or external source.

In a domain environment, time is synched with domain controllers in the domain and subdomains. 

In a standalone environment, with Windows 7, you can configure your system to synchronize with a time server via the GUI Date and Time settings.

By default, systems are configured to use their internal clock.   In this setting, windows time services will ensure you have the same relative time, but not necessarily accurate actual time.


Synching to an External Time Source

1) Tell the domain controller to use an NTP server:
Using Regedit, set

HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type

REG_SZ value from NT5DS to NTP.

2)  Set the server as a reliable time server:
Using regedit, set
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags

REG_DWORD value from 10 to 5 here.

3) Set the NtpServer you want to use here.  The default is time.windows.com,0x1.   It does work, so I did not bother changing it.   Note:  if you use a DNS name, then you add ",0x1" to the DNS name to indicate its a DNS name and not an IP:
HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\NtpServer
The referenced article suggests using the time services from the United States Naval Observatory tock.usno.navy.mil,0x1.

4) Restart the Windows Time Service:
net stop w32time
net start w32time
5) To tell your systems to sync immediately::
w32tm /resync /rediscover
Tip
There are additional registry settings you can configure to ensure external time synchronization operates effectively, see this article in the Microsoft Knowledge Base for details.

SOURCE:
http://www.windowsnetworking.com/articles_tutorials/configuring-windows-time-service.html

Comments

Post a Comment

Popular posts from this blog

Getting Authentication Prompt When Accessing SharePoint Web Services

You have a SharePoint site that is configured to be accessible by anonymous users, and the site's permissions are also configured to allow anonymous users.  You create a JavaScript based web part to access SharePoint's web services, pull list items, and display them using the GetListItems SOAP 1.2 call.  For some reason, users are prompted to authenticate when accessing your site.  I discovered that the fix for this is in the web request content type. If you set the content type to "text/xml; charset=utf-8" as in the SOAP 1.1 envelope sample, SharePoint won't prompt you to authenticate. Here's the /_vti_bin/lists.asmx?op=GetListItems output for reference: SOAP 1.1 The following is a sample SOAP 1.1 request and response. The placeholders shown need to be replaced with actual values. POST /_vti_bin/lists.asmx HTTP/1.1 Host: moss2007hv.kor.cmil.mil Content-Type: text/xml; charset=utf-8 Content-Length: length SOAPAction: "http://schemas.mi
Read more

How To use ASPNET_SetReg to store encrypted data in the registry and then decrypt the data for use in your app

1) You may find it a bit unsecure storing usernames and passwords inside your web.config.  As an alternative to doing this, Microsoft has established a standard way to store that type of info in the registry of your server instead.  Yes, you can encrypt portions of the web.config using aspnet_regiis, but it can become quite a hassle if you need to make changes to some of your appSettings keys or change the account password over a number of different applications.   ( http://msdn.microsoft.com/en-us/library/dtkwfdky.aspx ) 2) You can use a simple command line tool called aspnet_setreg.exe to create your registry entries.     You can find the tool here:              http://support.microsoft.com/kb/329290     The tool will use CryptProtectData to encrypt the values you put in the registry. The example in the article uses the following example: Run the following command to add the registry entry: c:\Tools>aspnet_setreg.exe -k:SOFTWARE\MY_SECURE_APP\identity -u:"yourd
Read more

PowerShell Script to Clean the Windows Installer Directory

Yesterday, I had a case of the Windows folder filling up the OS drive on a server. I already have scripts to archive the event log files in c:\windows\system32\winevt, as well as c:\inetpub\logs for web servers.  So I ran those again, but found the OS drive still down to less than 5 GB in space. Using a program called WinDirStat, I discovered that the Windows Installer directory had gotten pretty big, like over 40GB in size. I began my quest to Google for a solution. I saw one article talking about using DISM to clean up the winsxs directory.  https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/clean-up-the-winsxs-folder However, that didn't clean up the c:\windows\installer directory at all.  Also, installing the Desktop Experience Feature and using the cleanmgr.exe (Disk Clean up) utility didn't clean up the Installer directory either. Many blogs pointed towards a tool called Patch Cleaner. https://www.winhelponline.com/blog/windows-installer-
Read more