Home
  •  

The system clock has not been synchronized for some time

The_system_clock_has_not_been_synchronized_for_some_time_5_Rule (Rule)

Knowledge Base article:

Summary

This domain controller is unable to set its time because it is more than 15 hours out of sync with its time provider.

Sample Event:

The time service has not been able to synchronize the system time for %1 seconds because none of the time providers has been able to provide a usable time stamp. The system clock is unsynchronized.

Resolutions

Verify that the time provider has the correct time. If the time provider has the correct time, manually adjust the time on this domain controller to the correct time.

Run W32tm once at a command prompt to verify that the time can now synchronize.

External

For more information, see:

Element properties:

TargetMicrosoft.Windows.Server.2012.R2.AD.DomainControllerRole
CategoryEventCollection
EnabledTrue
Event_ID36
Event SourceMicrosoft-Windows-Time-Service
Alert GenerateFalse
RemotableTrue
Event LogSystem
CommentMom2005ID='{3E31A803-E56D-453C-BA5E-1AAAA31A1349}';MOM2005GroupID=

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="The_system_clock_has_not_been_synchronized_for_some_time_5_Rule" Comment="Mom2005ID='{3E31A803-E56D-453C-BA5E-1AAAA31A1349}';MOM2005GroupID=" Enabled="true" Target="AD2012R2Core!Microsoft.Windows.Server.2012.R2.AD.DomainControllerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>36</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Microsoft-Windows-Time-Service</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="CollectEventData" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>