SNTP, peer to peer, Client/server

Hi!

I am trying to get my DC to synchronize time with a NTP time server here in
Sweden.
The problem is, according to "SP Swedish National Testing and Research
Institute", that windows does a per-to-per request when it askes for time,
and they refuse that kind of querys since they are only intended to be used
between NTP server. The request method should be "client-server"

So how do I configure windows to make a "client-server" request when
synchronizing time with an external time provider?

I am running a windows 2003 R2 doamin.

/Håkan




Håkan

In news:%(E-Mail Removed),
Håkan <(E-Mail Removed)> stated, which I commented on below:
> Hi!
>
> I am trying to get my DC to synchronize time with a NTP time server
> here in Sweden.
> The problem is, according to "SP Swedish National Testing and Research
> Institute", that windows does a per-to-per request when it askes for
> time, and they refuse that kind of querys since they are only
> intended to be used between NTP server. The request method should be
> "client-server"
> So how do I configure windows to make a "client-server" request when
> synchronizing time with an external time provider?
>
> I am running a windows 2003 R2 doamin.
>
> /Håkan

On the DC that holds the PDC Emulator FSMO Role, run these commands (for
Win2003 only - 2000 is a little different):

net stop w32time
net time /setsntp:192.5.5.41 (or put in whatever server you want here)
net start w32time

Your domain machines will automatically look at the PDC Emulator as it's
time source in a domain.

In your firewall, make sure that TCP 123 inbound/outbound is allowed to the
DC.

--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...

Hi again and thank you for your answer.

Unfourtunally you answer the question "how do I enter the IP address of a
external Time server in my DC".

My question is: "how do I tell my DC to make Client-Server requests when
syncronizing time with an external time source?
(the deafult operation the DC does when synconizing time is a PEER-TO-PEER
request, which is no good since peer-to-peer is only intended to be used
between NTP-Servers.)

/Håkan


"Ace Fekay [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> In news:%(E-Mail Removed),
> Håkan <(E-Mail Removed)> stated, which I commented on below:
>> Hi!
>>
>> I am trying to get my DC to synchronize time with a NTP time server
>> here in Sweden.
>> The problem is, according to "SP Swedish National Testing and Research
>> Institute", that windows does a per-to-per request when it askes for
>> time, and they refuse that kind of querys since they are only
>> intended to be used between NTP server. The request method should be
>> "client-server"
>> So how do I configure windows to make a "client-server" request when
>> synchronizing time with an external time provider?
>>
>> I am running a windows 2003 R2 doamin.
>>
>> /Håkan
>
> On the DC that holds the PDC Emulator FSMO Role, run these commands (for
> Win2003 only - 2000 is a little different):
>
> net stop w32time
> net time /setsntp:192.5.5.41 (or put in whatever server you want here)
> net start w32time
>
> Your domain machines will automatically look at the PDC Emulator as it's
> time source in a domain.
>
> In your firewall, make sure that TCP 123 inbound/outbound is allowed to
> the DC.
>
> --
> Ace
> Innovative IT Concepts, Inc (IITCI)
> Willow Grove, PA
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft MVP - Directory Services
> Microsoft Certified Trainer
>
> Having difficulty reading or finding responses to your post?
> Instead of the website you're using, I suggest to use OEx (Outlook Express
> or any other newsreader), and configure a news account, pointing to
> news.microsoft.com. This is a direct link to the Microsoft Public
> Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows
> you to easily find, track threads, cross-post, sort by date, poster's
> name, watched threads or subject.
> It's easy:
>
> How to Configure OEx for Internet News
> http://support.microsoft.com/?id=171164
>
> Infinite Diversities in Infinite Combinations
> Assimilation Imminent. Resistance is Futile
> "Very funny Scotty. Now, beam down my clothes."
>
> The only constant in life is change...
>

In news:(E-Mail Removed),
Håkan <(E-Mail Removed)> stated, which I commented on below:
> Hi again and thank you for your answer.
>
> Unfourtunally you answer the question "how do I enter the IP address
> of a external Time server in my DC".
>
> My question is: "how do I tell my DC to make Client-Server requests
> when syncronizing time with an external time source?
> (the deafult operation the DC does when synconizing time is a
> PEER-TO-PEER request, which is no good since peer-to-peer is only
> intended to be used between NTP-Servers.)
>
> /Håkan

Those settings allow the DC to get time from a time server using NTP. By
default the DC that you configure this on (the PDC Emulator), is using
client/server communication to the NTP server to set it's own time.
Workstations, member servers and other DCs in the domain will receive and
update their own clocks from teh PDC Emulator.

Clocks and Time Keeping (scroll down to Windows Time Keeping for a Good
Time)
http://www.wilsonmar.com/1clocks.htm#TopMenu


By default it is not a time server per se other than offering time synch for
domain members. THis is important for Kerberos, since it only has a 5 minute
skew tolerance. However you can turn a Windows machine into a full blown NTP
time server. Her is one such app to make it as such:

NTP Server for Windows 2000 NT XP:
http://www.ntp-time-server.com/ntp-s...ntp-server.htm


Therefore, maybe I may not be understanding the difficulty you are having
setting the time on your PDC Emulator. Are there any errors in the Event
logs concerning W32time or any others?

Do you have a reference article explaining the peer to peer operations you
mentioned?

Thanks,
Ace