Hi,
I have read many threads about domain user (OS Server 2003 SP2) on how to adjust time on his/her computer, but I could not find an answer that I can rely on.
I know that if an admin logs in to each PC for a domain user, he/she can adjust the time.
This is not practical when you have got 100 users and above but how can we let the domain user do that by him/her self
or can it be done automatically?
Thanks!
Software/Hardware used:
ASKED:
October 11, 2009 12:54 PM
UPDATED:
May 9, 2013 6:11 PM
There is also a group policy setting to set a NTP time server so all domain machines will automatically synchronize with your specified time server(s). That way, you don’t have to worry about updating the clock times.
The settings to change are in Computer Configuration -> Administrative Templates -> System -> Windows Time Service -> Time Providers.
This is a helpful link.
In a domain enviroment, you want to be very careful regarding the time on your computers and your servers. If the time difference is greater then 5 minutes you will have kerberos security errors and really bad things can happen.
Each workstation and server in this network will try to locate a time source for synchronization. Using an internal algorithm designed to reduce network traffic, systems will make up to six attempts to find a time source. Here’s a look at the order of these attempts:
• Parent domain controller (on-site)
• Local domain controller (on-site)
• Local PDC emulator (on-site)
• Parent domain controller (off-site)
• Local domain controller (off-site)
• Local PDC emulator (off-site)
To ensure that your servers are finding the proper time, you must configure your PDC emulator to receive the time from a valid and accurate time source. To configure this role, follow these steps:
1. Log on to the domain controller.
2. Enter the following at the command line:
W32tm /config /manualpeerlist:time-b.nist.gov /syncfromflags:manual
Or you can use time-a.nist.gov, nist.netservicesgroup.com, time-a.timefreq.bldrdoc.gov.
3. Update the Windows Time Service configuration. At the command line, you can either enter W32tm /config /update, or you can enter the following:
Net stop w32time
Net start w32time
If a system isn’t a member of a domain, you must manually configure it to synchronize with a specified time source. Follow these steps:
1. Go to Start | Control Panel, and double-click Date And Time.
2. On the Internet Time tab, select a time server from the drop-down list, or enter the DNS name of your network’s internal time source.
3. Click Update Now, click Apply, and click OK.
Note: It’s important to make sure that any access control lists on your network allow UDP port 123 to and from systems to the selected time source. For more information, see Microsoft’s Windows Time Service Tools and Settings documentation.
http://www.intelliadmin.com/index.php/2007/01/unofficial-windows-2000-daylight-saving-time-patch/
The utility “Daylight Saving Time Patch” fixed the problem