@JaredBusch said in Domain Time off for some members:

@Donahue said in Domain Time off for some members:

@JaredBusch I think we are agreeing, but not saying the same things.

The host was set to itself as the time source, but was off by at least several hours. But that might have been several hours and 6 minutes, which when it made it all the way down into the VM meant that the hours were corrected, but not the 6 minutes? I don't know and I am grasping at straws here.

Either way, it is now set to NTP time. I still don't understand how windows could switch back and fourth between two time sources in a domain setting, especially considering how much of AD is dependent on good time keeping.

We are certianly not saying the same things.

You first side the time was off by hours, but the guest was flipping only 6 minutes.

Then you finally stated that the host timezone was off.

Timezone being not set correctly is only a display issue to the meat sack looking at it.

The UTC time is the UTC time.

Now if the UTC time was no correct by hours that is different. But that is not what you stated.

perhaps you are correct, unfortunately I didnt pay enough attention to know for sure how far off the host time was.

The problem is still occurring however.

@Dashrender said in Domain Time off for some members:

@Donahue said in Domain Time off for some members:

@JaredBusch I think we are agreeing, but not saying the same things.

The host was set to itself as the time source, but was off by at least several hours. But that might have been several hours and 6 minutes, which when it made it all the way down into the VM meant that the hours were corrected, but not the 6 minutes? I don't know and I am grasping at straws here.

Either way, it is now set to NTP time. I still don't understand how windows could switch back and fourth between two time sources in a domain setting, especially considering how much of AD is dependent on good time keeping.

Do the logs tell you what source it's changing to match?

No, and I can't figure out if I can turn on verbose logging for this event. Maybe there is a better tool than event viewer?

@JaredBusch I think we are agreeing, but not saying the same things.

The host was set to itself as the time source, but was off by at least several hours. But that might have been several hours and 6 minutes, which when it made it all the way down into the VM meant that the hours were corrected, but not the 6 minutes? I don't know and I am grasping at straws here.

Either way, it is now set to NTP time. I still don't understand how windows could switch back and fourth between two time sources in a domain setting, especially considering how much of AD is dependent on good time keeping.

@JaredBusch said in Domain Time off for some members:

@Donahue said in Domain Time off for some members:

I just realized it must be related to this host. I recently moved the main VM that I am having a problem with to this host.

Windows could be checking hte hardware clock. This has nothing to do with VM tools settings.

And your host (the hardware) was off.

But Windows was not moving it too far..

Answer: Windows sucks.

the host clock was out like 8 hours, because it wasnt set to the correct time zone. Although, maybe it drifted by the 6 minutes and windows itself was correcting for the time zone difference? I now wish I would have looked before I just set it to an NTP source. It might have been the smoking gun I was looking for.

@Dashrender said in Domain Time off for some members:

@JaredBusch said in Domain Time off for some members:

@Dashrender said in Domain Time off for some members:

@JaredBusch said in Domain Time off for some members:

@Donahue said in Domain Time off for some members:

I just realized it must be related to this host. I recently moved the main VM that I am having a problem with to this host.

Windows could be checking hte hardware clock. This has nothing to do with VM tools settings.

And your host (the hardware) was off.

But Windows was not moving it too far..

Answer: Windows sucks.

Interesting - does EXSi not virtualized the hardware clock to itself as well?

English please?

Does ESXi provide direct access the the real hardware clock, or does it create a virtual HW clock that is basically the time EXSi has itself - which could be different from the real hardware.

how would it do that? I dont think you could have a virtualized clock unless it was tied to some authoritative time sources, and the only two I can think of are the hardware clock and an NTP type clock.

I just realized it must be related to this host. I recently moved the main VM that I am having a problem with to this host.

@JaredBusch said in Domain Time off for some members:

@Donahue said in Domain Time off for some members:

@JaredBusch said in Domain Time off for some members:

Also, your VM sets time on boot to that even if that option is not checked. Until the VM network comes online and sets itself to whatever source it has.

But this VM has not been rebooting, it just keeps changing while running.

Didn't say it was. Just saying fix this problem also.

oh ok, I understand.

I feel like maybe there is some sort of group policy that should be set to make this sync work correctly, and that somehow mine is not set. Although, this problem is only recent.

@JaredBusch said in Domain Time off for some members:

Also, your VM sets time on boot to that even if that option is not checked. Until the VM network comes online and sets itself to whatever source it has.

But this VM has not been rebooting, it just keeps changing while running.

The host time has been set correctly, but I don't think that was the source of the problem.

ok, that setting was already disabled in the VMWare tools options, so that's not the problem.

ok, host time was wrong, but it was way wrong, more than the 6 minutes. How do I tell ESXi not to sync with host?

hypervisor or host?

I have several VM's that are not syncing with domain time correctly. They keep jumping forward about 6 minutes, and then jumping back. This is happening repeatedly. Is there a way to force these domain members to stay on domain time? The DC is not doing this and is set to get it's time from pool.ntp.org

are you sure there is no local account that can be used to login?

@crizzle said in If you are new drop in say hello and introduce yourself please!:

Just found your Forum and it's already helped me out. Hello from Hermiston, Oregon. I am the IT Dept. here.

Nice, another from Oregon.

thanks for the info guys, I will take a look. I like the idea of using a VM.

Apparently Fortigate wont let me create reservations outside of the lease pool. I even tried setting an excluded range, but it simply will not allow me to do it.

I can either:

• Get a different DHCP server
• Abandon using reservations
• Open the lease pool to the entire scope and live with the mixed results
• Open the lease pool to the entire scope and create 254 dummy reservations to be edited later.

My plan was to have 10.0.0.1/22 as my network, with the lease pool of 10.0.1.0 thru 10.0.3.254 and 10.0.0.2 thru 10.0.0.255 reserved for all these devices using reservations.

@DustinB3403 said in Where do I start with replacing the whole MS AD stack:

@JaredBusch said in Where do I start with replacing the whole MS AD stack:

@DustinB3403 said in Where do I start with replacing the whole MS AD stack:

@Donahue yes, don't assign IP addresses manually on your systems.

Use DHCP Reservations instead.

That's what he said. I have no idea WTF you are going on about.

He's going in circles and not understanding what is being said. Hence it gets explained in a different manner.

I understood @JaredBusch, I dont think you understood me.

@DustinB3403 said in Where do I start with replacing the whole MS AD stack:

@Donahue said in Where do I start with replacing the whole MS AD stack:

I just want to confirm, the general idea is that the DHCP server is static, and EVERYTHING else is just a reservation?

Why statically assign at all? You're in a tight spot because you've already statically assigned a lot of devices.

Instead, just create reservations and let DHCP handle it from there.

I dont want to be static anymore, I want to use reservations. are you saying yes to my question above?