Re: IIS Logs & System Clock Sync...?

From: John Alderson (jalderson.spamnot@adelphia.net)
Date: 01/25/03 

From: "John Alderson" <jalderson.spamnot@adelphia.net>
Date: Fri, 24 Jan 2003 20:04:59 -0500

"Dominic" <corpkid_at@at_bestweb.net> wrote in message
news:07c001c2c3ed$028c9bb0$8ef82ecf@TK2MSFTNGXA04...
> We have several IIS 5.0 boxes that we monitor the logs for
> using NetGenesis software. The need has arisin to keep
> all of the server's clocks in sync, and I was hoping to be
> able to use some sort of "atomic clock" software and just
> schedule a simple "net time" command each night from the
> IIS boxes to this "time box" running the Atomic clock
> software...
>
> The problem being, it would adversely impact the logging
> of the IIS servers when the time was updated on the
> servers...
>
> Does anyone have any advice on how they've pulled this
> off, or better yet, of a utility that is smart enough to
> update log files when it updates the clock?
>
> Thanks in advance.
> Dominic

Dominic,

Use the built-in Windows Time Service to update from an NTP time source.
The Windows Time Service in Windows 2000, as the RK TimeServ utility did in
NT4.0, uses SNTP (Simple NTP) as it's protocol. If you find a time server
in your organization or a publicly available time source on the internet
(you can use time.windows.com but there are others), the Time Service will
keep your clock in sync and therefore you won't need to change log file
times as the skew should be kept < 1sec.

One thing you might want to do to make sure you could see if there was a
large jump in time is set the Log parameter for the service to decimal 100
(0x64). This is located at:

HKLM\System\CurrentControlSet\Services\W32Time\Parameters\Log (DWORD)

This will write 2 entries to the System Event Log every time it syncs time.
One of those entries will give you and indication of the offset.

You can find some more info here:

http://www.johnalderson.com/sntp_win.asp

John Alderson

Relevant Pages

  • Re: W32time event id 36
    ... >>The time service has not been able to synchronize the system time for ... The system clock is unsynchronized. ... >>as a message is logged in the event viewer when the clocks are ... net start w32time ...
    (microsoft.public.windowsxp.general)
  • Re: W32time event id 36
    ... >The time service has not been able to synchronize the system time for ... The system clock is unsynchronized. ... >as a message is logged in the event viewer when the clocks are ... net start w32time ...
    (microsoft.public.windowsxp.general)
  • Re: Clock gone on task bar WM2003SE?
    ... maybe the clock has been moved for a tweak in the registry.. ... i dont have an IIs but i have an imate pda2k.. ... > I've just upgraded from an XDA II to an XDA IIs which uses Windows Mobile ... > Wi-Fi is the main reason I upgraded and now I discover that I can't use it ...
    (microsoft.public.pocketpc.phone_edition)
  • Re: Permission denied on Set ... = New Excel.Application (was Using Excel with Automation from a web
    ... IIS to run "out of process" stuff. ... directive in an ASP page. ... >"The Duke had a mind that ticked like a clock, and, like ... >> Change Set objXL = New Excel.Application ...
    (microsoft.public.inetserver.iis.security)
  • Re: Inaccurate Clock
    ... This will stop the time service, unregister it, re-register it and re-start ... > First of all I let XP synchronize the clock, ... > If I don't do that then the clock drifts on the MCE machine when MCE is ...
    (microsoft.public.windows.mediacenter)