LKBEN10681: Howto monitor the time difference and synchronisation on all domain controllers at once

Symptom

You need to control the time synchronisation

Cause

This can be usefull if you find kerberos errors in your event log

Solution

The time syncronisation is done by the PDC Emulator. This server should have a good time source for synchronising the clock. With the command

w32tm /monitor

SRV1.lubby.org [10.1.20.10]:
    ICMP: 0ms delay.
    NTP: +0.0000650s offset from SRV1.lubby.org
        RefID: SRV2.lubby.org [10.1.20.11]
SRV1.lubby.org *** PDC *** [10.1.20.11]:
    ICMP: 0ms delay.
    NTP: +0.0000000s offset from SRV2.lubby.org
        RefID: 'LOCL' [76.79.67.76]
SRV3.lubby.org [10.10.0.5]:
    ICMP: 20ms delay.
    NTP: -0.0139294s offset from SRV2.lubby.org
        RefID: SRV2.lubby.org[10.1.20.11]

you can check the time differences on the domain controllers. In the output you will find *** PDC *** which is the PDC emulator. This system has no timing difference because it is the time source.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!

About the Author

Author: Wim Peeters - Keskon GmbH & Co. KG

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.