Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest. There is no machine above this machine in the domain hierarchy to use as a time source. It is recommended that you either configure a reliable time service in the root domain, or manually configure this PDC emulator in the root domain to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy. If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
|English: Request a translation of the event description in plain English.|
We fixed this by running the following commands on the domain controller:
1. net stop w32time
2. w32tm /config /syncfromflags:manual /manualpeerlist:"0.us.pool.ntp.org, 1.us.pool.ntp.org, 2.us.pool.ntp.org, 3.us.pool.ntp.org"
3. w32tm /config /reliable:yes
4. net start w32time
IT System Admin
There is a Microsoft FIX IT that will set this up for you on Server 2012, 2008, and 2003. It's the second Fit It: Configuring the Windows Time service to use an external time source. See ME816042.
T756545 suggests that the computer should be manually configured to use an external time source. See the link for details.
This event is similar with event id 12 from W32Time (recorded on Windows 2000, XP, and 2003). Please see the link below.
|Private comment: Subscribers only. See example of private comment|
|Links: Event id 12 from W32Time|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
|Custom search for *****: Google - Bing - Microsoft - Yahoo|
Send comments or solutions
- Notify me when updated