Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 50 Source: W32Time

The time service detected a time difference of greater than 5000 milliseconds  for 900 seconds. The time difference might be caused by synchronization with  low-accuracy time sources or by suboptimal network conditions. The time service is no longer synchronized and cannot provide the time to other clients or update  the system clock. When a valid time stamp is received from a time service  provider, the time service will correct itself.
I fixed this on a SBS 2008 by running the following commands on a command prompt:

w32tm /config /syncfromflags:domhier /reliable:no /update  
net stop w32time
net start w32time
As per Microsoft: "A problem in Microsoft Windows Server 2003 typically causes the Windows Time service (W32Time) to log this error every time the service attempts to synchronize with an external clock". See MSW2KDB for additional information about this event.
If your OS is Win2k3, see ME830092 for a hotfix.

The article ME223184 lists all registry keys used for the w32time. The default settings are used for common usage. You also can modify it for special environment. The article also describes each key meaning and how to modify it. Please read the article carefully before modifying any key.

ME884776 provides information on configuring the Windows Time service against a large time offset.
This event should only appear on your DCs, but the problem may also manifest itself on W32Time clients with W32Time Event ID's 24 and 29. This is how this issue came to our attention. The patch mentioned in the following comment has not been regression tested. It did solve the Event ID 50 problem in our forest, but on the DCs in our domain, we are now seeing W32Time Event ID 22 at regular intervals.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.