Event ID - 142

Event Id	142
Source	Microsoft-Windows-Time-Service
Description	The time service has stopped advertising as a time source because the local clock is not synchronized.
Event Information	According to Microsoft : Cause : This event is logged when the time service has stopped advertising as a time source because the local clock is not synchronized. Resolution : Ensure that the time source is functioning correctly The local time clock is not synchronized with the time source. This indicates a communication issue with the time source provider. Verify that the computer reporting Event 142 is able to communicate with the configured time source. To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority. To ensure that the computer reporting the event can communicate with its time source: Open a command prompt as an administrator on the computer logging the event. To open a command prompt as an administrator, click Start. In Start Search, type Command Prompt. At the top of the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. Type net time /querysntp to determine the name of the time source for the computer. Type w32tm /stripchart /computer:timesource, and then press ENTER. Substitute the name of the time source computer for timesource in the command. For example, if the time source computer name is server1.contoso.com, type w32tm /stripchart /computer:server1.contoso.com, and then press ENTER. Watch as the time is reported from the time provider, which occurs every other second (in two-second intervals) by default. After a few minutes, evaluate the time report consistency: If time reports are received consistently, the time source is functioning properly. If time reporting is inconsistent, there may be a network issue that is preventing time communications, such as a high volume of traffic or a network card error. If time reports do not appear at all after a few minutes of monitoring, there is probably a configuration or operational issue with the local time client or time source. To stop the time source query reports, press CTRL and C simultaneously. To review the configuration of the Windows Time service, at the command prompt, type w32tm /query /configuration /verbose, and then press ENTER to see the configuration settings. To configure a new time source, at the command prompt, type w32tm /config /manualpeerlist:timesourcename, and then press ENTER. Substitute the name of the time source that you want to use, such as time.windows.com, for timesourcename. To update your Windows Time service configuration, at the command prompt, type w32tm /config /update, and then press ENTER. Verify : When the Windows Time service is advertising time as a time source, Event ID 139, "The time service has started advertising as a time source," is logged in Event Viewer.
Reference Links	Event ID 142 from Source Microsoft-Windows-Time-Service

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught