Event ID - 26

Event Id26
SourceMicrosoft-Windows-Time-Service
DescriptionTime Provider NtpClient: The response received from domain controller %1 has a bad signature. The response may have been tampered with and will be ignored.
Event InformationAccording to Microsoft :
Cause :
This event is logged when the response received from domain controller has a bad signature.
Resolution :
Investigate causes for invalid responses from the time source
The error in Event Viewer should provide additional information. There may be an operating system or network configuration error, rogue server, or attempted computer security attack. Verify that the network adapter is installed, enabled, and functioning properly. Ensure that TCP/IP is installed and configured properly.
Verify :
To perform this procedure, you must have membership in Administrators or you must have been delegated the appropriate authority.
To verify that the Windows Time service is synchronizing correctly:
  1. Open a command prompt as an administrator. To open a command prompt as an administrator, click Start. In Start Search, type Command Prompt. At the top of the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. At the command prompt, type W32TM /resync, and then press ENTER.
  3. At the command prompt, type W32TM /query /status, and then press ENTER.
    This command displays the status of the Windows Time service synchornization. The Last Successful Sync Time line of the output displays the date and time that you ran the W32TM /resync command in the previous step.
To confirm that the Windows Time service synchronized successfully with its time source when you ran the W32TM /resync command, verify that Event ID 35 appears in Event Viewer.
Reference LinksEvent ID 26 from Source Microsoft-Windows-Time-Service

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh