This page gives you access to various advanced Domain Time II settings.
Note:
If you see the Group Policy applied indicator in the lower-left corner of the applet,
there are settings on this page that are being overridden by an Active Directory Group Policy. Settings controlled by policy may be greyed-out or you may be otherwise prevented from making a change here.
See the Active Directory page for more information on using Group Policies.
CAUTION: The default settings on this page are usually correct for most applications. Only make changes if you are sure you need them and you fully understand the effects of the change.
Incorrect settings may adversely affect your clock accuracy or even prevent clock corrections entirely.
Miscellaneous options include:
Enable Test Mode
Checking this box causes Domain Time to operate in all ways as it would in normal operation, except for actually
setting the time or changing the machine's slew rate. This allows you to test or troubleshoot the server's ability
to obtain and serve the time, but without actually changing the server's time.
Results of all operations are logged normally, so you can use the log in test mode to track down any communication
or other synchronization issues. Note: Be sure to disable this option when you're through testing!
Enable Clock-Change Monitor
Domain Time's Clock-Change Monitor notifies Domain Time if another user or process attempts to change the time on this system.
When an unauthorized clock change is detected, Domain Time immediately re-synchronizes the time with its time source(s) and makes
a warning entry in the logs. This prevents inadvertent or malicious tampering with the system clock.
This setting should always be enabled unless you are doing testing that requires you to change the system clock manually, either from the
Windows Date/Time applet or from some other application.
Force setting of CMOS clock at service shutdown
Controls whether Domain Time should perform an API system call to write the current system time to the CMOS Real-Time Clock (RTC) on the motherboard each time the service stops.
On modern operating systems, the CMOS RTC clock is primarily used to provide something approaching the current date/time to the operating system while booting until the operating system
can take over timekeeping. The CMOS clock is subject to all manner of inaccuracies, and is therefore not used for timekeeping while the OS is running, nor is it updated often.
The CMOS clock can therefore go for long periods without having its time corrected, resulting in huge drift. By default, Domain Time will update the CMOS with
the current time either when doing so doesn't cause a disruption to the operating system time (during stepped corrections) or just before shutdown so
that the CMOS has its best chance to be accurate during the time the system is not running.
When this box is unchecked (the default), Domain Time writes the current time to the CMOS RTC clock:
when making a stepped time correction.
if the Domain Time service is running and it receives a system shutdown command from the operating system.
If the box is checked, then Domain Time will also write to the CMOS clock any time the Domain Time service is stopped, whether or not the stoppage is due to
a system shutdown.
Although at first read this may seem desirable, there is a downside to writing to the CMOS clock if the machine isn't already being hard-set (stepped) or in the process of shutting down.
The API used by the operating system to write to the system clock also immediately steps the system time to the same time as the RTC but only at the resolution of the
CMOS clock. Since the RTC resolution varies on different machine, writing to the CMOS will cause the system clock to jump either forward or backward to the nearest increment of the RTC, which can mean an
unpredictable jump of 1ms or more in the system time.
As a result, you should leave this switch turned off unless you need to force a CMOS update by manually stopping the Domain Time service.
Enable advance scheduling of leap second corrections
Controls how Domain Time handles upcoming UTC leap second corrections.
NTP packets can contain a flag to indicate an upcoming UTC leap second. When this checkbox is enabled, Domain Time will apply leap seconds at 23:59:59 on the last
day of the month in which the leap occurs. If unchecked, leap seconds will be applied at the first timecheck following the leap.
Domain Time acquires pending leap second information only from NTP
time sources. All queried NTP sources must agree that a leap is pending
in order for Domain Time to schedule the leap. If the sources disagree,
then the leap will be handled at the next timecheck after it occurs, and
a warning notice that the leap indicators are inconsistent will be placed
in the log.
Pending leap information is queried with each timecheck (NTP sources
only), and maintained only while the Domain Time service is running.
Restarting the Domain Time service will clear any pending leap second
corrections. If the leap is still pending when the Domain Time service
is restarted, it will be rescheduled for the appropriate time. If the
leap occurs while the Domain Time service is stopped, the leap will be
applied at the first timecheck after startup.
The Domain Time II System Tray applet (DTTRAY.EXE) is a foreground application that can load whenever a user
logs into the system. When loaded, it will display as an icon in the System Tray.
The applet provides a number of very useful functions, including audio alerts and chiming, statistics, drift graphs,
and a quick way to launch the various features of Domain Time installed on the machine.
The settings in this section determine whether or not to load the applet and which audio features are enabled.
Show system tray icon
This checkbox controls whether the Domain Time System Tray applet is loaded during login.
If the icon is present in the System Tray, you can right-click it to choose from many additional features.
Note: The applet will unload if the Domain Time service is stopped. On XP and Server 2003, the applet will reload automatically when the service restarts.
However, beginning with Windows Vista, Microsoft disabled the ability for background services to launch foreground programs, so on those systems you will need
to either log out and back in or relaunch the applet manually. You can restart the applet manually by entering dttray.exe into the
Start -> Run program field or at a command prompt.
Time of Day Chimes
The Time of Day Chimes feature plays sound files at specific times of the day, such as every 15, 30 45 minutes and on the hour.
This option will be unavailable if the Show System Tray icon checkbox on the Advanced tab is unchecked.
There must be a logged-in user and the Domain Time II System Tray icon must be present in the Windows System Tray for the chimes to play.
You must also have installed at least one free Domain Time II Chime Pack
for this feature to work.
See the documentation for the System Tray Applet for complete instructions and
to download free Domain Time II Chime Packs.
Timeset Chime
Plays a sound whenever the Server successfully sets its time from its time source.
If checked, the sound will play whether or not there is a logged-in user.
Sound card plays through the sound card if available PC Speaker plays through the PC speaker
The settings in this section configure the Windows Time Service to co-exist with Domain Time.
Windows Time mode:
This drop-down box lets you determine how the Windows Time Service should behave on this machine. When the Domain Time II Server service starts,
it will force the Windows Time service into this mode. The available options are:
Disabled The service startup setting for Windows Time Service is set to Disabled. The Windows Time Service will not be allowed to run.
This is the preferred setting for all machines except machines running Windows Cluster Server (see the NoSync description above).
Note: Some utilities on Windows Server will report spurious errors in the logs such as "Time not set for xxxxx seconds" when Windows Time is disabled on domain Controllers.
DCDIAG may also complain, but these warnings can be safely ignored.
NoSync This mode makes sure the w32time Server Provider portion of the Windows Time Service is running, but the w32time Client Time Provider is disabled.
In this mode, Domain Time II Server actually obtains the correct time and manages the local system clock; Windows Time merely answers NTP requests.
This mode will conflict with Domain Time II Server unless this setting is also in place:
All of the NTP protocol boxes must be unchecked on the Domain Time Server Serve the Time page.
On Domain Time versions prior to v5.1, NoSync was the preferred selection when Domain Time II Server was installed on a Windows Domain Controller
or a Cluster Server. As of version 5.1, this mode is only recommended for Cluster Server. In all other cases, Disabled is the preferred Windows Time mode.
Cluster Service
The Windows Cluster has a default startup dependency on w32Time. It does not require the time service for any other purpose. Thus,
the simple recommendation for installing Domain Time on clusters is to set the Windows Time mode: dropdown to NoSync, which allows the service to be
running to satisfy the startup dependency, but allows Domain Time to set the cluster's clock.
However, you may replace the cluster's startup dependency if you want. After installing Domain Time Client (or Server) on the cluster, use RegEdit
to navigate to the following key:
Change the DependOnService value (omitting the quotation marks) from "w32Time" to "Domain Time Client" (or "Domain Time Server" if that's what's installed).
The cluster service will then wait until Domain Time has started before starting the cluster. You can then set the Windows Time mode: dropdown to Disabled.
Not Touched The existing configuration of the Windows Time Service is not changed.
This mode may severely conflict with Domain Time II Server unless all of these settings are in place:
The "Do not set this machine's time" radio button is selected on the Obtain the Time page.
The "Refuse to serve time until this machine's time has been set" checkbox has been unchecked on the Obtain the Time page.
All of the NTP protocol boxes must be unchecked on the Serve the Time page.
In this mode, Windows Time will operate however it is configured. Domain Time will not set the time or manage the clock, and will only answer time sync queries on all enabled protocols other than NTP.
This option is not recommended.
NT5DS The Windows Service is set to run and it obtains the time from the Active Directory hierarchy in NT5DS sync mode.
This mode will severely conflict with Domain Time II Server unless all of these settings are in place:
The "Do not set this machine's time" radio button is selected on the Obtain the Time page.
The "Refuse to serve time until this machine's time has been set" checkbox has been unchecked on the Obtain the Time page.
All of the NTP protocol boxes must be unchecked on the Serve the Time page.
In this mode, Windows Time obtains the time, manages the local clock, and serves NTP. Domain Time will merely answer time sync queries on all other enabled protocols.
This option is not recommended.
AllSync The Windows Service is set to run and it attempts to obtain the time from the Active Directory hierarchy in NT5DS sync mode and using NTP Client mode.
This mode will severely conflict with Domain Time II Server unless all of these settings are in place:
The "Do not set this machine's time" radio button is selected on the Obtain the Time page.
The "Refuse to serve time until this machine's time has been set" checkbox has been unchecked on the Obtain the Time page.
All of the NTP protocol boxes must be unchecked on the Serve the Time page.
In this mode, Windows Time obtains the time, manages the local clock, and serves NTP. Domain Time will merely answer time sync queries on all other enabled protocols.
This option is not recommended.
NTP The Windows Service is set to run and it attempts to obtain the time using Windows Time's NTP Client mode.
This mode will severely conflict with Domain Time II Server unless all of these settings are in place:
The "Do not set this machine's time" radio button is selected on the Obtain the Time page.
The "Refuse to serve time until this machine's time has been set" checkbox has been unchecked on the Obtain the Time page.
All of the NTP protocol boxes must be unchecked on the Serve the Time page.
In this mode, Windows Time obtains the time, manages the local clock, and serves NTP. Domain Time will merely answer time sync queries on all other enabled protocols.
This option is not recommended.
Disable Agent
This checkbox disables the Domain Time II Windows Time Agent.
Note: In version 4.1, the Domain Time II Windows Time Agent was installed by default. In version 5.1 and newer, Domain Time is able to replace Windows Time entirely in most cases, so
the agent is not installed and the option is now disabled by default.
If you would like to use the Agent, you may install it from the distribution files, or by using Manager, or download the software from the website, if desired.
You must close and re-open the Server Control Panel applet after installing the Agent.
If Agent is installed, the button launches the Domain Time II Windows Time Agent to allow you to view and configure the settings for the Windows Time service.
Depending on the settings above, various parts of the Windows Time Agent applet may be disabled. See the full Windows Time Agent documentation for more details.