Monitors that the time on the current DC matches the time on the PDC.
AD Time Skew Monitor. This monitor generates an alert when the time difference between the local domain controller and a target domain controller exceeds a specified threshold.
This means that two domain controller disagree about the current time. If the time skew grows too large, Kerberos authentication can be affected.
Interval - default 5 minutes (300 seconds).
Alert Threshold - default 2 minutes (120 seconds).
Retry Iterations - default 3 times.
Target Server - the target DC which the time will be compared against. The target DC should be one that is configured to sync time with an external, reliable time source. By default, this will be the PDC.
Possible causes include the following:
PDC not configured to use external time source
Multiple DCs configured to use different external time sources
Verify each DC is syncing from either the PDC or a Gtime server. Verify that which ever DC all other DCs are syncing time from is set to use an external time source.
You can use the command line tool w32tm.exe to configure time on the DCs. See external resources below.
For more information, see:
Target | Microsoft.Windows.Server.2012.R2.AD.DomainControllerRole | ||
Parent Monitor | Microsoft.Windows.Server.2012.R2.AD.WindowsTime.AggregateMonitor | ||
Category | Custom | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | Microsoft.Windows.Server.2012.R2.AD.TimeSkew.Monitortype | ||
Remotable | False | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="Microsoft.Windows.Server.2012.R2.AD.TimeSkew.Monitor" Accessibility="Public" Enabled="true" Target="AD2012R2Core!Microsoft.Windows.Server.2012.R2.AD.DomainControllerRole" ParentMonitorID="Microsoft.Windows.Server.2012.R2.AD.WindowsTime.AggregateMonitor" Remotable="false" Priority="Normal" TypeID="Microsoft.Windows.Server.2012.R2.AD.TimeSkew.Monitortype" ConfirmDelivery="false">
<Category>Custom</Category>
<AlertSettings AlertMessage="Microsoft.Windows.Server.2012.R2.AD.TimeSkew.Monitor.AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Property[@Name='ErrorString']$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="TimeSkewOK" MonitorTypeStateID="TimeSkewOK" HealthState="Success"/>
<OperationalState ID="TimeSkewError" MonitorTypeStateID="TimeSkewError" HealthState="Warning"/>
</OperationalStates>
<Configuration>
<Frequency>300</Frequency>
<TimeoutSeconds>300</TimeoutSeconds>
<Threshold>120</Threshold>
<Iterations>3</Iterations>
<TargetServer>$Target/Property[Type="AD!Microsoft.Windows.Server.AD.Library.DomainControllerRole"]/PDCEmulator$</TargetServer>
</Configuration>
</UnitMonitor>