Thursday, December 4, 2014

Windows server lose time syncronization

Everybody who work in an IT company will know when a user call and says: My computer is 5 minutes off.

You fixed and then the user call you back the next day with the same problem, so you discovered the server is 5 minutes off and you go and change it.

Next day same problem, the domain controller server is off 5 minutes again, so lets go to apply a permanent configuration:

1. Stop the time service:

net stop w32time

2. Set internet service where to get the time:

w32tm /config /syncfromflags:manual /manualpeerlist:time.nist.gov

w32tm /config /reliable:yes

3. Start time service:

net start w32time

4. Test:

w32tm /query /configuration

Wait a few minutes and the server will change the time and then all the computers will get the time right.

Why is so important to set the time right? Because where there is a security incident you need the time right in all your servers and devices, yes if you do not have it, then the security people will have more difficulties to correlate the incident, in some times this will be you.

If you want to practice information security please check this pentest or ethical hacking lab: http://www.thehost1.com/


No comments:

Post a Comment