W32Time Logs Event ID 36 Message on Windows Server 2003 RC1-Based Domain Controllers and Designated Time Servers (328621)


The information in this article applies to:

  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Datacenter Edition
  • Microsoft Windows Server 2003, Web Edition
This article was previously published under Q328621

SYMPTOMS

W32Time reports itself as "unsynchronized," and it stops serving time to requesting clients. In response to the unsynchronized status, an event ID 36 message is logged in the system event log:
MessageId=0x24
Severity=Warning
Facility=Core
SymbolicName=MSG_TIME_SOURCE_NONE
Language=English
The time service has not synchronized the system time for %1 seconds because none of the time service providers provided a usable time stamp. The time service is no longer synchronized and cannot provide the time to other clients or update the system clock. Monitor the system events displayed in the Event Viewer to make sure that a more serious problem does not exist.
Even though W32Time runs on all Windows Server 2003-based computers, the resolution of this event is primarily for Windows Server 2003-based domain controllers.

CAUSE

This problem occurs because there is a code bug in the Release Candidate 1 (RC1) release of Windows Server 2003. The problem is aggravated by network congestion, a high CPU load or a high network load, and synchronization from low accuracy time sources.

RESOLUTION

The problem has been resolved in post-RC1 builds of Windows Server 2003.

WORKAROUND

To work around this problem, configure the following registry settings to any Windows Server 2003 RC1-based time server or domain controller to prevent that particular computer from experiencing the problem:
  1. Start Registry Editor.
  2. Locate and then click the following registry keys, and then add the following registry values:
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32time\Config\

      Value name: MinPollInterval
      Value type: Reg_DWord
      Value data: 6
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32time\Config\

      Value name: MaxPollInterval
      Value type: Reg_DWord
      Value data: 14
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32time\Parameters\

      Value name: NtpServer
      Value type: Reg_SZ
      Value data: Root time server that you are using,0x1
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32time\Parameters\

      Value name: Type
      Value type: Reg_SZ
      Value data: NTP
    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32time\TimeProviders\NtpClient\

      Value name: SpecialPollInterval
      Value type: Reg_DWord
      Value data: 300

      If the "root time server that you are using,0x1" syntax for the NtpServer registry value is confusing, use the primary domain controller (PDC) of the forest root domain root as the root time service.
    Microsoft recommends that you apply the registry settings to all Windows Server 2003 RC1-based servers that are hosting the time service.. Note that computers that use this configuration will be using unauthenticated time.
  3. Restart the time service. To do so, type the following command from the NT CMD prompt:

    c:\>net stop w32time & net start w32time

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

By design, W32Time reports itself as "unsynchronized" when it has not received a valid time sample in 1.5 times the maximum poll interval. This threshold was appropriate when the maximum poll interval on domain controllers was set to higher defaults (2^15 seconds). However, now that the maximum poll interval has been reduced to 2^10 seconds, the following problem occurs:
  1. W32Time synchronizes as expected, and it reaches the maximum poll interval.
  2. W32Time experiences one synchronization error (either because of a loss of network connectivity, or the server is down), and then it sets itself to "unsynchronized."
Typically, W32time does not set its time to "unsynchronized" unless it has failed several polls.
Modification Type:MajorLast Reviewed:12/19/2003
Keywords:kbbug KB328621
©2003 Microsoft Corporation. All rights reserved.