Upon checking HKLM\System\CCC\Services\W32Time\Paramters, the entries
are the same for problem workstations and those not generating warning
messages. What is the cause?
FYI, below are the exported registry settings of one of the problem
Workstations:
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time
Class Name: <NO CLASS>
Last Write Time: 8/21/2005 - 4:02 AM
Value 0
Name: Type
Type: REG_DWORD
Data: 0x20
Value 1
Name: Start
Type: REG_DWORD
Data: 0x2
Value 2
Name: ErrorControl
Type: REG_DWORD
Data: 0x1
Value 3
Name: ImagePath
Type: REG_EXPAND_SZ
Data: %SystemRoot%\system32\svchost.exe -k netsvcs
Value 4
Name: DisplayName
Type: REG_SZ
Data: Windows Time
Value 5
Name: ObjectName
Type: REG_SZ
Data: LocalSystem
Value 6
Name: Description
Type: REG_SZ
Data: Maintains date and time synchronization on all
clients and servers in the network. If this service is stopped, date
and time synchronization will be unavailable. If this service is
disabled, any services that explicitly depend on it will fail to start.
Value 7
Name: FailureActions
Type: REG_BINARY
Data:
00000000 05 00 00 00 00 00 00 00 - 00 00 00 00 02 00 00 00
................
00000010 64 00 20 00 01 00 00 00 - 60 ea 00 00 01 00 00 00 d.
.....`ê......
00000020 60 ea 00 00 `ê..
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Config
Class Name: <NO CLASS>
Last Write Time: 9/5/2003 - 11:53 AM
Value 0
Name: LastClockRate
Type: REG_DWORD
Data: 0x2625a
Value 1
Name: MinClockRate
Type: REG_DWORD
Data: 0x260d4
Value 2
Name: MaxClockRate
Type: REG_DWORD
Data: 0x263e0
Value 3
Name: FrequencyCorrectRate
Type: REG_DWORD
Data: 0x4
Value 4
Name: PollAdjustFactor
Type: REG_DWORD
Data: 0x5
Value 5
Name: LargePhaseOffset
Type: REG_DWORD
Data: 0x138800
Value 6
Name: SpikeWatchPeriod
Type: REG_DWORD
Data: 0x5a
Value 7
Name: HoldPeriod
Type: REG_DWORD
Data: 0x5
Value 8
Name: MaxPollInterval
Type: REG_DWORD
Data: 0xf
Value 9
Name: LocalClockDispersion
Type: REG_DWORD
Data: 0xa
Value 10
Name: EventLogFlags
Type: REG_DWORD
Data: 0x2
Value 11
Name: PhaseCorrectRate
Type: REG_DWORD
Data: 0x1
Value 12
Name: MinPollInterval
Type: REG_DWORD
Data: 0xa
Value 13
Name: MaxNegPhaseCorrection
Type: REG_DWORD
Data: 0xffffffff
Value 14
Name: MaxPosPhaseCorrection
Type: REG_DWORD
Data: 0xffffffff
Value 15
Name: UpdateInterval
Type: REG_DWORD
Data: 0x7530
Value 16
Name: AnnounceFlags
Type: REG_DWORD
Data: 0xa
Value 17
Name: MaxAllowedPhaseOffset
Type: REG_DWORD
Data: 0x12c
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Parameters
Class Name: <NO CLASS>
Last Write Time: 9/5/2003 - 11:53 AM
Value 0
Name: ServiceMain
Type: REG_SZ
Data: SvchostEntry_W32Time
Value 1
Name: ServiceDll
Type: REG_EXPAND_SZ
Data: C:\WINDOWS\system32\w32time.dll
Value 2
Name: Type
Type: REG_SZ
Data: NT5DS
Value 3
Name: NtpServer
Type: REG_SZ
Data: time.windows.com,0x1
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Security
Class Name: <NO CLASS>
Last Write Time: 7/17/2002 - 10:23 AM
Value 0
Name: Security
Type: REG_BINARY
Data:
00000000 01 00 14 80 90 00 00 00 - 9c 00 00 00 14 00 00 00
................
00000010 30 00 00 00 02 00 1c 00 - 01 00 00 00 02 80 14 00
0...............
00000020 ff 01 0f 00 01 01 00 00 - 00 00 00 01 00 00 00 00
ÿ...............
00000030 02 00 60 00 04 00 00 00 - 00 00 14 00 fd 01 02 00
..`.........ý...
00000040 01 01 00 00 00 00 00 05 - 12 00 00 00 00 00 18 00
................
00000050 ff 01 0f 00 01 02 00 00 - 00 00 00 05 20 00 00 00
ÿ........... ...
00000060 20 02 00 00 00 00 14 00 - 8d 01 02 00 01 01 00 00
...............
00000070 00 00 00 05 0b 00 00 00 - 00 00 18 00 fd 01 02 00
............ý...
00000080 01 02 00 00 00 00 00 05 - 20 00 00 00 23 02 00 00 ........
...#...
00000090 01 01 00 00 00 00 00 05 - 12 00 00 00 01 01 00 00
................
000000a0 00 00 00 05 12 00 00 00 - ........
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders
Class Name: <NO CLASS>
Last Write Time: 9/5/2003 - 11:49 AM
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpClient
Class Name: <NO CLASS>
Last Write Time: 9/5/2003 - 11:53 AM
Value 0
Name: Enabled
Type: REG_DWORD
Data: 0x1
Value 1
Name: InputProvider
Type: REG_DWORD
Data: 0x1
Value 2
Name: AllowNonstandardModeCombinations
Type: REG_DWORD
Data: 0x1
Value 3
Name: CrossSiteSyncFlags
Type: REG_DWORD
Data: 0x2
Value 4
Name: ResolvePeerBackoffMinutes
Type: REG_DWORD
Data: 0xf
Value 5
Name: ResolvePeerBackoffMaxTimes
Type: REG_DWORD
Data: 0x7
Value 6
Name: CompatibilityFlags
Type: REG_DWORD
Data: 0x80000000
Value 7
Name: EventLogFlags
Type: REG_DWORD
Data: 0x0
Value 8
Name: DllName
Type: REG_SZ
Data: C:\WINDOWS\system32\w32time.dll
Value 9
Name: SpecialPollTimeRemaining
Type: REG_MULTI_SZ
Data:
Value 10
Name: SpecialPollInterval
Type: REG_DWORD
Data: 0xe10
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\TimeProviders\NtpServer
Class Name: <NO CLASS>
Last Write Time: 9/5/2003 - 11:49 AM
Value 0
Name: Enabled
Type: REG_DWORD
Data: 0x1
Value 1
Name: InputProvider
Type: REG_DWORD
Data: 0x0
Value 2
Name: AllowNonstandardModeCombinations
Type: REG_DWORD
Data: 0x1
Value 3
Name: DllName
Type: REG_SZ
Data: C:\WINDOWS\system32\w32time.dll
Key Name:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w32time\Enum
Class Name: <NO CLASS>
Last Write Time: 8/21/2005 - 4:02 AM
Value 0
Name: 0
Type: REG_SZ
Data: Root\LEGACY_W32TIME\0000
Value 1
Name: Count
Type: REG_DWORD
Data: 0x1
Value 2
Name: NextInstance
Type: REG_DWORD
Data: 0x1