[Samba] Time synchronization issue

[Andrey Repin]

Greetings, William LIM!

> Hi,

> I have set a Samba AD DC on my network. Version is 4.1.17 on a Debian
> Wheezy.

> I have an issue on my Windows XP SP3 clients : the time on these computers
> is not synchronized with my Domain Controler.

> Big problem is, if time difference is considerable (more or less 5
> minutes), users can not log in.

> On the other hand, my server is correctly synchronized with NTP server.

> I don't understand the reason of my problem, and don't know were to start
> investigating.

> Has anybody got this issue ?

Got exactly your problem two days ago.
From elevated shell:

w32tm /unregister
reboot
w32tm /register
w32tm /config /manualpeerlist:time.example.com /syncfromflags:MANUAL /update
time /T (To test if synchronization done correctly)

time.example.com is your domain time server - either AD DC or an NTP server it
is synchronized with. I prefer NTP, though. Domain time service seems to be
unreliable in my setup, or needs to be enabled manually.


-- 
With best regards,
Andrey Repin
Wednesday, April 22, 2015 15:01:06

Sorry for my terrible english...