Event ID - 3

Event Id3
SourceMicrosoft-Windows-Time-Service
DescriptionThe time provider '%1' logged the following message: %2
Event InformationAccording to Microsoft :
Cause :
This event is logged when the time provider logged the message.
Resolution :
Correct general errors
The Windows Time service has reported a warning or error to Event Viewer. The warning or error in Event Viewer should provide additional information. If you are not able to resolve this issue with the information in the event description:
  • Restart the Windows Time service.
  • If you have not enabled Windows Time service logging, enable it. Attempt to restart the Windows Time service after you enable logging.
  • After you enable logging, review the Windows Time log file, and then unregister and register the Windows Time service.
If these steps do not resolve the issue, restart the computer.
Perform the following procedures on the computer that is logging the event to be resolved.
To perform these procedures, you must have membership in Administrators, or you must have been delegated the appropriate authority.
Restart the Windows Time service
To restart the Windows Time service:
  1. Click Start. In Start Search, type services.msc, and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. The Services snap-in opens.
  2. In the list of services, right-click Windows Time service, and then click Restart. (If the service is not running, click Start.)
Enable Windows Time service logging
To enable Windows Time service logging:
  1. Open a command prompt as an administrator. To open a command prompt as an administrator, click Start. In Start Search, type Command Prompt. At the top of the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. Create a folder to receive the Windows Time service log file. In the command prompt window, type md c:\W32Time, and then press ENTER. This command creates a directory named W32Time on the C: drive.
  3. To enable Windows Time service debug logging, at a command prompt, type w32tm /debug /enable /file:c:\W32Time\w32time.log /size:10000000 /entries:0-116, and then press ENTER.
Review the Windows Time log file
To review the Windows Time log file:
  1. Open the w32time.log file in Notepad. At a command prompt, type start notepad c:\w32time\w32time.log, and then press ENTER.
  2. Scroll to the end of the log to see if you can identify any errors that indicate that Windows Time service values from the registry are null. You can reset the Windows Time service values in the registry by unregistering and then registering the service.
Unregister and register the W32time service
To unregister and register the W32time service:
  1. To stop the Windows Time service, at the command prompt, running as an administrator, type net stop w32time, and then press ENTER.
  2. To unregister the Windows Time service dynamic-link library (DLL), at the command prompt, type w32tm /unregister, and then press ENTER.
  3. To register the Windows Time service DLL, at the command prompt, type w32tm /register, and then press ENTER.
  4. To start the Windows Time service, at the command prompt, type net start w32time, and then press ENTER.
Post-troubleshooting cleanup
You can disable Windows Time debug logging by running the command W32tm /debug /disable. You can also remove the c:\w32time folder and w32time.log file when troubleshooting is complete.
To remove the folder and the log file:
  1. To remove the log file, you must first stop the Windows Time service. To stop the Windows Time service, at the command prompt, type net stop w32time, and then press ENTER.
  2. To remove the c:\w32time folder, at the command prompt, type rd c:\w32time /s /q, and then press ENTER.
  3. Start the Windows Time service again. To start the Windows Time service, at the command prompt, type net start w32time, and then press ENTER.
  4. Close the command prompt window.
Verify :
To verify that the Windows Time service is functioning correctly, check Event Viewer for entries that indicate that the service started successfully and that the system time is synchronizing.
Perform the following procedure on the computer that is logging the event to be resolved.
To perform this procedure, you must have membership in Administrators or you must have been delegated the appropriate authority.
To verify that the Windows Time service is functioning correctly:
  1. Click Start. In Start Search, type services.msc, and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue. The Services snap-in opens.
  2. In the list of services, confirm that the Windows Time service is running.
When the service starts successfully, the Service Control Manager reports that the Windows Time service has entered the running state (Event ID 7036). The W32Time source in Event Viewer reports receipt of time updates and clock synchronization (Event IDs 37 and 35, respectively).
Reference LinksEvent ID 3 from Source Microsoft-Windows-Time-Service

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.