| Event Id | 27 |
| Source | W32time |
| Description | Time Provider NtpClient: The response received from domain controller <host dns name> is missing the signature. The response may have been tampered with and will be ignored. |
| Event Information | Here is the information from news group posts: 1) This problem occurred on a Windows XP Professional system that was previously configured to use a specific SNTP server address (net time /setsntp:"tick.usno.navy.mil") and then joined to a local domain. The workstation apparently was still trying to update via previous settings. As opposed to un-registering the service I simply removed the configured settings with the command: net time /SETSNTP:””. Make sure to include an empty set of quotes. Then run: net time /query, and you should receive: "This computer is not currently configured to use a specific SNTP server". In my case, the workstation appears to have synchronized with the domain. 2) I got this error on a single WinXP machine on my network. All the other workstations were running W32Time without major problems. The only difference was that this was my own workstation and I had tried to configure the W32tm application manually. To fix it, I unregistered the service (removing it from the system and the registry) using the command "w32tm /unregister" then restarted the machine. Run "w32tm /register" after reboot and check the service state (should be set to automatic, but start manually if necessary). This does not get to the root of the problem (probably some misconfiguration of W32tm), but so far Ive had no more problems. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.