Hi Guys, would like to ask again for your expertise. One of our server is not time synching to a DC. It's time is late about less than a minute compared to a DC, sometimes it's late more than 3 minutes. If tried manually to correct the time, it will revert back to the wrong one after a while. When checked w32tm /query /source, the source is the correct DC. When tried w32tm /resync, it will prompt successful but changes did not effect. Already restarted windows time services also. On the event log, the system logged that the time was changed from 9:00AM to 9:00AM (weird...), but the DC is already 5:00PM. This is only happening to a specific server but it's our biometrics security door server. Any ideas what else to check and troubleshoot the problem? Thanks!

Hello, for domain time sync please see http://msmvps.com/blogs/mweber/archive/2010/06/27/time-configuration-in-a-windows-domain.aspx Is the DC having the PDCEmulator FSMO configured to an external time source or do you use the internal hardware clock? Assure that port 123 UDP is open on all machines. How many DCs do you have and did you check them with the support tools that everything is ok? Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi Meinolf, Thanks for the response. Will check on the link if it will work. The DC PDC FSMO is configured to an external time source which is OK. Our computers, DCs (18 servers), and other servers are sync except for the mentioned above. Can I ask what support tools to use? Thanks!

Hello, dcdiag, repadmin, dnslint and now new ADREPLSTATUS . ipconfig /all >c:\ipconfig.txt [all DCs] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) http://explore.live.com/windows-live-skydrive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.