Event ID's (first of many)

The_KiD · 23 Oct 2006 at 09:35

I have decided this week to go through all the event logs on the servers at my work and resolve any issues. So please expect to be inundated with questions

The first I have is to do with the time service.

Event Type: Warning
Event Source: w32time
Event Category: None
Event ID: 54
Date: 23/10/2006
Time: 09:17:54
User: N/A
Computer: LCH-AD
Description:
The Windows Time Service was not able to find a Domain Controller. A time and date update was not possible.
Data:
0000: e5 03 00 00 å...

From what I read on EventID.net this indicates that machine with this problem could not find the domain controller.

Problem I have is this is the domain controller :S

unknowndomain · 23 Oct 2006 at 09:51

Im not going to say im an expert, but just as an idea is it not possible that if this happened once or twice quite close together that its simply a case of windows is rubish and lost the connection, however if its still happening or causing a problem then perhapse theres a deeper problem?

The_KiD · 23 Oct 2006 at 10:09

It's happening twice a day, but at different times.

However your right in that it happens twice in quick succession.

bitslice · 23 Oct 2006 at 10:34

found this elsewhere:

-----------------------------------------------
This problem can occur on a domain controller (DC) when the default port (123) is already in use by the Time service that is running on the DC before the command is
executed. The W32tm command tries to start the Time service before execution, but
it does work if the service is already started.

To successfully use the W32tm command on a DC with the other options, use one or
more of the following steps:

- Stop the Time service to execute the command, and then restart the
service.

- Change the port by using the -p switch to execute the W32tm command
on a DC.
-----------------------------------------------

Captain Fizz · 23 Oct 2006 at 10:47

Does this server have internet access?

If not, it can be it looking for the MS Time server and being unable to reach it.

Here's a good guide on it from MS:
http://www.microsoft.com/technet/pr.../technologies/security/ws03mngd/26_s3wts.mspx

If you type the following into CMD:
net time /querysntp

It will show you what server Windows Time Servce is attempting to connect to.
Try pinging the server etc.

Might help.

The_KiD · 23 Oct 2006 at 10:58

Captain Fizz said:
Does this server have internet access?

If not, it can be it looking for the MS Time server and being unable to reach it.

Here's a good guide on it from MS:
http://www.microsoft.com/technet/pr.../technologies/security/ws03mngd/26_s3wts.mspx

If you type the following into CMD:
net time /querysntp

It will show you what server Windows Time Servce is attempting to connect to.
Try pinging the server etc.

Might help.

When I try the querysntp command I get this:

This computer is not currently configured to use a SNTP server

How do I configure it?
This computer

Captain Fizz · 23 Oct 2006 at 11:37

net time /setsntp

Will set it back to time.microsoft.com
(If it has internet access)

Now - It may be that domain controllers are not meant to sync with windows time - I'm not sure. :confused:

But that will set it back to default anyway.

The_KiD · 23 Oct 2006 at 11:39

okay...

System Error 2

The system cannot find the file specified

This is Server 2000 btw.

Edit : Ok so I changed it to net time /setsntp:time.microsoft.com

And that seemed to have worked, so will keep an eye on the logs for the next 48 hours and see if that error has gone.
thanks all!