NTP on Windows XP

We use NTP to keep computers's time synchronized with PDC. Synchronization
works fine for all hosts running Windows 2003, but not for Windows XP hosts.
The local time on Windows XP host fluctuate around PDC's time, sometimes
faster, sometimes slower, it keeps on changing. NTP settings for XP and 2003
hosts are exactly the same, defined by group policy.

NTP log as below:
148378 05:01:52.0669695s - ---------- Log File Opened -----------------
148378 05:01:52.0669695s - Entered W32TmServiceMain
148378 05:01:52.0669695s - CurSpc:15625000ns BaseSpc:15625000ns
SyncToCmos:Yes
148378 05:01:52.0669695s - PerfFreq:3200170000c/s
148378 05:01:52.0669695s - Time zone OK.
148378 05:01:52.0669695s - ReadConfig: Found provider 'NtpClient':
148378 05:01:52.0669695s - ReadConfig: 'Enabled'=0x00000001
148378 05:01:52.0669695s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148378 05:01:52.0669695s - ReadConfig: 'InputProvider'=0x00000001
148378 05:01:52.0669695s - ReadConfig: Found provider 'NtpServer':
148378 05:01:52.0669695s - ReadConfig: 'Enabled'=0x00000001
148378 05:01:52.0669695s - ReadConfig:
'DllName'='C:\WINDOWS\system32\w32time.dll'
148378 05:01:52.0669695s - ReadConfig: 'InputProvider'=0x00000000
148378 05:01:52.0669695s - ReadConfig (policy): Found provider 'NtpClient':
148378 05:01:52.0669695s - ReadConfig (policy): 'Enabled'=0x00000001
148378 05:01:52.0669695s - ReadConfig (policy): Found provider 'NtpServer':
148378 05:01:52.0669695s - ReadConfig (policy): 'Enabled'=0x00000000
148378 05:01:52.0669695s - ReadConfig: 'PhaseCorrectRate'=0x00000001
148378 05:01:52.0669695s - ReadConfig: 'UpdateInterval'=0x00007530
148378 05:01:52.0669695s - ReadConfig: 'FrequencyCorrectRate'=0x00000004
148378 05:01:52.0669695s - ReadConfig: 'PollAdjustFactor'=0x00000005
148378 05:01:52.0669695s - ReadConfig: 'LargePhaseOffset'=0x02FAF080
148378 05:01:52.0669695s - ReadConfig: 'SpikeWatchPeriod'=0x00000384
148378 05:01:52.0669695s - ReadConfig: 'HoldPeriod'=0x00000005
148378 05:01:52.0669695s - ReadConfig: 'MinPollInterval'=0x0000000A
148378 05:01:52.0669695s - ReadConfig: 'MaxPollInterval'=0x0000000F
148378 05:01:52.0669695s - ReadConfig: 'AnnounceFlags'=0x0000000A
148378 05:01:52.0669695s - ReadConfig: 'LocalClockDispersion'=0x0000000A
148378 05:01:52.0669695s - ReadConfig: 'MaxNegPhaseCorrection'=0xFFFFFFFF
148378 05:01:52.0669695s - ReadConfig: 'MaxPosPhaseCorrection'=0xFFFFFFFF
148378 05:01:52.0669695s - ReadConfig: 'EventLogFlags'=0x00000003
148378 05:01:52.0669695s - ReadConfig: 'MaxAllowedPhaseOffset'=0x00000000
148378 05:01:52.0669695s - DomainHierarchy: LSA role change notification.
Redetecting.
148378 05:01:52.0825945s - ClockDisciplineThread: Starting:148378
05:01:52.0825945s - LI:3 S:0 RDl:0 RDs:0 TSF:0x0
148378 05:01:52.0825945s - Starting Providers.
148378 05:01:52.0825945s - Starting 'NtpClient',
dll:'C:\WINDOWS\system32\w32time.dll'
148378 05:01:52.0825945s - NtpTimeProvOpen("NtpClient") called.
148378 05:01:52.0825945s - NtpProvider: Created 2 sockets (1 listen-only):
172.16.16.140:123, (127.0.0.1:123)
148378 05:01:52.0825945s - PeerPollingThread: waiting forever
148378 05:01:52.0825945s - ReadConfig:
'AllowNonstandardModeCombinations'=0x00000001
148378 05:01:52.0825945s - ReadConfig: 'CompatibilityFlags'=0x80000000
148378 05:01:52.0825945s - ReadConfig: 'SpecialPollInterval'=0x00000E10
148378 05:01:52.0825945s - ReadConfig: 'ResolvePeerBackoffMinutes'=0x0000000F
148378 05:01:52.0825945s - ReadConfig: 'ResolvePeerBackoffMaxTimes'=0x00000007
148378 05:01:52.0825945s - ReadConfig: 'EventLogFlags'=0x00000003
148378 05:01:52.0825945s - ReadConfig: 'ManualPeerList'='172.16.16.40'
148378 05:01:52.0825945s - PeerPollingThread: waiting 0.000s
148378 05:01:52.0825945s - NtpClient started.
148378 05:01:52.0825945s - Successfully started 1 providers.
148378 05:01:52.0825945s - PeerPollingThread: PeerListUpdated
148378 05:01:52.0825945s - W32TmServiceMain: waiting i16.000s (1024.000s)
148378 05:01:52.0825945s - Resolving 172.16.16.40
148378 05:01:52.0825945s - Peer poll: Max:1024.0000000s Cur:00.0000000s
148378 05:01:52.0825945s - PeerPollingThread: waiting 0.000s
148378 05:01:52.0825945s - W32TmServiceMain: Network Topology Change
148378 05:01:52.0825945s - ClockDispln:148378 05:01:52.0825945s -
ClockDispln TimeSlip:148378 05:01:52.0825945s - LI:3 S:0

RDl:0 RDs:0 TSF:0x0
148378 05:01:52.0825945s - TimeProvCommand([NtpClient], TPC_NetTopoChange)
called.
148378 05:01:52.0825945s - NtpProvider: Network Topology Change
148378 05:01:52.0825945s - Peers reset: p-p:1 a-p:1 a-x:0
148378 05:01:52.0825945s - NtpProvider: Created 2 sockets (1 listen-only):
172.16.16.140:123, (127.0.0.1:123)
148378 05:01:52.0825945s - PeerPollingThread: waiting 0.000s
148378 05:01:52.0825945s - W32TmServiceMain: waiting i16.000s (1024.000s)
148378 05:01:52.0825945s - PeerPollingThread: PeerListUpdated
148378 05:01:52.0825945s - Resolving 172.16.16.40
148378 05:01:52.0825945s - Peer poll: Max:1024.0000000s Cur:00.0000000s
148378 05:01:52.0825945s - PeerPollingThread: waiting 0.000s
148378 05:01:52.0825945s - PeerPollingThread: WaitTimeout
148378 05:01:52.0825945s - Polling peer 172.16.16.40
(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123)
148378 05:01:52.0825945s - Sending packet to 172.16.16.40
(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123) in Win2K detect

mode, stage 1.
148378 05:01:52.0825945s - Peer poll: Max:1024.0000000s Cur:00.0000000s
148378 05:01:52.0825945s - PeerPollingThread: waiting 1024.000s
148378 05:01:52.0825945s - ListeningThread -- DataAvailEvent set for socket
0 (172.16.16.140:123)
148378 05:01:52.0825945s - ListeningThread -- response heard from
172.16.16.40:123
148378 05:01:52.0825945s - /-- NTP Packet:
148378 05:01:52.0825945s - | LeapIndicator: 0 - no warning; VersionNumber:
3; Mode: 4 - Server; LiVnMode: 0x1C
148378 05:01:52.0825945s - | Stratum: 1 - primary reference (syncd by radio
clock)
148378 05:01:52.0825945s - | Poll Interval: 10 - 1024s; Precision: -6 -
15.625ms per tick
148378 05:01:52.0825945s - | RootDelay: 0x0000.0000s - unspecified;
RootDispersion: 0x000A.F7A3s - 10.9673s
148378 05:01:52.0825945s - | ReferenceClockIdentifier: 0x4C4F434C - source
name: "LOCL"
148378 05:01:52.0825945s - | ReferenceTimestamp: 0xC9B87A0C7FF7CED9148378
05:01:52.0825945s - - 12819795084499875000ns -

148377 06:11:24.4998750s
148378 05:01:52.0825945s - | OriginateTimestamp: 0xC9B9BB401524E9C4148378
05:01:52.0825945s - - 12819877312082594500ns -

148378 05:01:52.0825945s
148378 05:01:52.0825945s - | ReceiveTimestamp: 0xC9B9BB3FEC000000148378
05:01:52.0825945s - - 12819877311921875000ns -

148378 05:01:51.9218750s
148378 05:01:52.0825945s - | TransmitTimestamp: 0xC9B9BB3FEC000000148378
05:01:52.0825945s - - 12819877311921875000ns -

148378 05:01:51.9218750s
148378 05:01:52.0825945s - >-- Non-packet info:
148378 05:01:52.0825945s - | DestinationTimestamp: 148378 05:01:52.0825945s
- 0xC9B9BB401524E9C4148378 05:01:52.0825945s - -

12819877312082594500ns148378 05:01:52.0825945s - - 148378 05:01:52.0825945s
148378 05:01:52.0825945s - | RoundtripDelay: 000ns (0s)
148378 05:01:52.0825945s - | LocalClockOffset: -160719500ns - 0:00.160719500s
148378 05:01:52.0825945s - \--
148378 05:01:52.0825945s - Peer 172.16.16.40
(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123) is not Win2K. Setting compat

flags.
148378 05:01:52.0825945s - Peer poll: Max:1024.0000000s Cur:1024.0000000s
148378 05:01:52.0825945s - Response from peer 172.16.16.40
(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123), ofs: -00.1607195s
148378 05:01:52.0825945s - 5 Age:5 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:08.0000000s
148378 05:01:52.0825945s - 4 Age:4 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:12.0000000s
148378 05:01:52.0825945s - 3 Age:3 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:14.0000000s
148378 05:01:52.0825945s - 2 Age:2 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:15.0000000s
148378 05:01:52.0825945s - 1 Age:1 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:15.5000000s
148378 05:01:52.0825945s - 0 Age:0 Ofs:-00.1607195s Dly:+00.0000000s
Dsp:10.9829559s Dst:10.9829559s FDsp:07.7500000s
148378 05:01:52.0825945s - Logging information: NtpClient is currently
receiving valid time data from 172.16.16.40

(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123).
148378 05:01:52.0825945s - W32TmServiceMain: resync req, irreg already
pending.
148378 05:01:52.0825945s - W32TmServiceMain: waiting i16.000s (1024.000s)
148378 05:02:08.0825945s - W32TmServiceMain: timeout
148378 05:02:08.0825945s - TimeProvCommand([NtpClient], TPC_GetSamples)
called.
148378 05:02:08.0825945s - NtpClient returned 1 samples.
148378 05:02:08.0825945s - Sample 0 offset:-00.1607195s delay:+00.0000000s
dispersion:16.0000000s
148378 05:02:08.0825945s - Intersection successful with 0 dropped samples.
148378 05:02:08.0825945s - 0: Sample:0 SyncDist:320000000 SelectDisp:0
148378 05:02:08.0825945s - Sample 0 chosen. Select Dispersion:00.0000000s
148378 05:02:08.0825945s - ClockDispln:ClockDispln Update: *STALE*
148378 05:02:08.0825945s - W32TmServiceMain: waiting 1024.000s
148378 05:04:30.1138445s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
148378 05:13:19.0200945s - RPC Caller is BAKUP4\Administrator
(S-1-5-21-823752494-554133448-2125863818-500)
148378 05:13:19.0200945s - RPC Call - HardResync
148378 05:13:19.0200945s - W32TmServiceMain: ********** Time Slip
Notification **********
148378 05:13:19.0200945s - ClockDispln:148378 05:13:19.0200945s -
ClockDispln TimeSlip:148378 05:13:19.0200945s - LI:3 S:0

RDl:0 RDs:0 TSF:0x0
148378 05:13:19.0200945s - TimeProvCommand([NtpClient], TPC_TimeJumped)
called.
148378 05:13:19.0200945s - Peer poll: Max:1024.0000000s
Cur:337.0625000s148378 05:13:19.0200945s - New:15.1558016s
148378 05:13:19.0200945s - PeerPollingThread: PeerListUpdated
148378 05:13:19.0200945s - PeerPollingThread: PeerListUpdated
148378 05:13:19.0200945s - W32TmServiceMain: waiting i16.000s (1024.000s)
148378 05:13:19.0200945s - PeerPollingThread: waiting 15.156s
148378 05:13:19.0200945s - PeerPollingThread: waiting 15.156s
148378 05:13:34.1763445s - PeerPollingThread: WaitTimeout
148378 05:13:34.1763445s - Polling peer 172.16.16.40
(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123)
148378 05:13:34.1763445s - Peer poll: Max:1024.0000000s Cur:00.0000000s
148378 05:13:34.1763445s - PeerPollingThread: waiting 1024.000s
148378 05:13:34.1763445s - ListeningThread -- DataAvailEvent set for socket
0 (172.16.16.140:123)
148378 05:13:34.1763445s - ListeningThread -- response heard from
172.16.16.40:123
148378 05:13:34.1763445s - /-- NTP Packet:
148378 05:13:34.1763445s - | LeapIndicator: 0 - no warning; VersionNumber:
3; Mode: 4 - Server; LiVnMode: 0x1C
148378 05:13:34.1763445s - | Stratum: 1 - primary reference (syncd by radio
clock)
148378 05:13:34.1763445s - | Poll Interval: 10 - 1024s; Precision: -6 -
15.625ms per tick
148378 05:13:34.1763445s - | RootDelay: 0x0000.0000s - unspecified;
RootDispersion: 0x000A.F9B7s - 10.9754s
148378 05:13:34.1763445s - | ReferenceClockIdentifier: 0x4C4F434C - source
name: "LOCL"
148378 05:13:34.1763445s - | ReferenceTimestamp: 0xC9B87A0C8010624D148378
05:13:34.1763445s - - 12819795084500250000ns -

148377 06:11:24.5002500s
148378 05:13:34.1763445s - | OriginateTimestamp: 0xC9B9BDFE2D24E9C4148378
05:13:34.1919695s - - 12819878014176344500ns -

148378 05:13:34.1763445s
148378 05:13:34.1919695s - | ReceiveTimestamp: 0xC9B9BDFE08000000148378
05:13:34.1919695s - - 12819878014031250000ns -

148378 05:13:34.0312500s
148378 05:13:34.1919695s - | TransmitTimestamp: 0xC9B9BDFE08000000148378
05:13:34.1919695s - - 12819878014031250000ns -

148378 05:13:34.0312500s
148378 05:13:34.1919695s - >-- Non-packet info:
148378 05:13:34.1919695s - | DestinationTimestamp: 148378 05:13:34.1919695s
- 0xC9B9BDFE2D24E9C4148378 05:13:34.1919695s - -

12819878014176344500ns148378 05:13:34.1919695s - - 148378 05:13:34.1763445s
148378 05:13:34.1919695s - | RoundtripDelay: 000ns (0s)
148378 05:13:34.1919695s - | LocalClockOffset: -145094500ns - 0:00.145094500s
148378 05:13:34.1919695s - \--
148378 05:13:34.1919695s - Peer poll: Max:1024.0000000s Cur:1023.9843750s
148378 05:13:34.1919695s - Response from peer 172.16.16.40
(ntp.m|0x0|172.16.16.140:123->172.16.16.40:123), ofs: -00.1450945s
148378 05:13:34.1919695s - 5 Age:5 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:08.0000000s
148378 05:13:34.1919695s - 4 Age:4 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:12.0000000s
148378 05:13:34.1919695s - 3 Age:3 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:14.0000000s
148378 05:13:34.1919695s - 2 Age:2 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:15.0000000s
148378 05:13:34.1919695s - 1 Age:1 Ofs:+00.0000000s Dly:+00.0000000s
Dsp:16.0000000s Dst:16.0000000s FDsp:15.5000000s
148378 05:13:34.1919695s - 0 Age:0 Ofs:-00.1450945s Dly:+00.0000000s
Dsp:10.9910736s Dst:10.9910736s FDsp:07.7500000s
148378 05:13:34.1919695s - W32TmServiceMain: resync req, irreg already
pending.
148378 05:13:34.1919695s - W32TmServiceMain: waiting i0.828s (1008.828s)
148378 05:13:35.0200945s - W32TmServiceMain: timeout
148378 05:13:35.0200945s - TimeProvCommand([NtpClient], TPC_GetSamples)
called.
148378 05:13:35.0200945s - NtpClient returned 1 samples.
148378 05:13:35.0200945s - Sample 0 offset:-00.1450945s delay:+00.0000000s
dispersion:16.0000000s
148378 05:13:35.0200945s - Intersection successful with 0 dropped samples.
148378 05:13:35.0200945s - 0: Sample:0 SyncDist:320000000 SelectDisp:0
148378 05:13:35.0200945s - Sample 0 chosen. Select Dispersion:00.0000000s
148378 05:13:35.0200945s - ClockDispln:ClockDispln Update: SO:-1450945
KPhO:0 *PhO:-1450945 uT:970 SD:80000000 LI:0 S:2 RDl:0

RDs:161450945 TSF:0x0 Unset->Hold
148378 05:13:35.0200945s - PhCRA:-48 phcT:1024 KPhO:-1450945
148378 05:13:35.0200945s - Logging information: The time service is now
synchronizing the system time with the time source

172.16.16.40 (ntp.m|0x0|172.16.16.140:123->172.16.16.40:123).
148378 05:13:35.0200945s - W32TmServiceMain: waiting 1024.000s
148378 05:14:00.3404387s - W32TimeHandler called: SERVICE_CONTROL_STOP
148378 05:14:00.3404387s - Service shutdown initiated with exit code: 0.
148378 05:14:00.3404387s - ClockDisciplineThread: hShutDownEvent signaled.
Exiting.
148378 05:14:00.3404387s - Stopping 'NtpClient',
dll:'C:\WINDOWS\system32\w32time.dll'
148378 05:14:00.3404387s - NtpTimeProvClose([NtpClient]) called.
148378 05:14:00.3404387s - PeerPollingThread: waiting forever
148378 05:14:00.3404387s - ListeningThread: StopEvent
148378 05:14:00.3404387s - Exiting ServiceShutdown
148378 05:14:00.3404387s - ---------- Log File Closed -----------------