Windows Server preventing time sync with Rackspace NTP
by Rackspace Technology Security Team
Rackspace has identified a Network Time Protocol (NTP) setting in the registry of some Windows Server devices preventing time sync with Rackspace NTP Servers.
If you received a notification because devices on your account are affected, this post will guide you on how to remediate the issue.
Affected servers are currently synchronizing time locally instead of with the intended Rackspace NTP Server(s). Local time sync is not an industry best practice and may result in unexpected time drift.
To restore proper time sync operation, an NTP registry key on the affected devices must be updated and a time resync performed.
The fix can be applied by running the following commands from a PowerShell prompt on the affected server(s):
Note: Be sure to update the command with the appropriate datacenter time server from the list below:
---
w32tm /config /syncfromflags:manual /manualpeerlist:"time.ord1.rackspace.com,0x9 time2.ord1.rackspace.com,0x9" /update
w32tm /resync
---
The proposed change has been found not to be production impacting in our testing. However, some customers have time sensitive 3rd party applications; out of an abundance of caution Rackspace has chosen not to proactively apply the change to customer devices and instead recommend the change be applied at a time of your choosing. Rackspace support can assist with executing the change ad-hoc or as a scheduled maintenance.
Rackspace NTP Server List and Location:
- DFW time.dfw3.rackspace.com
- DFW time2.dfw3.rackspace.com
- ORD time.ord1.rackspace.com
- ORD time2.ord1.rackspace.com
- IAD time.iad3.rackspace.com
- IAD time2.iad3.rackspace.com
- LON time.lon3.rackspace.com
- LON time2.lon3.rackspace.com
- HKG time.hkg5.rackspace.com
- HKG time2.hkg5.rackspace.com
- SYD time.syd2.rackspace.com
- SYD time2.syd2.rackspace.com
- NYC time.nyc2.rackspace.com
- NYC time2.nyc2.rackspace.com
- SJC time.sjc3.rackspace.com
- SJC time2.sjc3.rackspace.com
- MCI time.mci1.rackspace.com
- MCI time2.mci1.rackspace.com
- SHA time.sha3.rackspace.com
- SHA time2.sha3.rackspace.com
- SIN time.sin3.rackspace.com
- SIN time2.sin3.rackspace.com
Recent Posts
Create Custom Chatbot with Azure OpenAI and Azure AI Search
December 10th, 2024
Upgrade Palo Alto Firewall and GlobalProtect for November 2024 CVE
November 26th, 2024
Ready for Lift Off: The Community-Driven Future of Runway
November 20th, 2024
Google Cloud Hybrid Networking Patterns — Part 1
October 17th, 2024
Google Cloud Hybrid Networking Patterns — Part 3
October 17th, 2024