Post #3538527
2026-07-02 17:08 UTC
Public Service Announcement:
If you have a machine that keeps losing trust relationship with Active Directory, *especially* at the frequency of about once every one to three days: hit an elevated CMD prompt on the affected system (after restoring its trust relationship by leaving and rejoining the domain), then try w32tm /resync.
If it tells you "no available time data", that machine can't get NTP from the domain. Ping the AD, go to the DC it resolves to, try w32tm /resync THERE also.
Replies (2)
-
@ajn142@infosec.exchange 2026-07-02 17:13
@jimsalter@fosstodon.org PSA, computers were not meant to talk to each other, do not let them ;)
-
@jimsalter@fosstodon.org 2026-07-02 17:11
I had a particularly frustrating issue caused by a WAN failure in a multi-WAN, multi-site AD this week, and time drift turned out to be the culprit. Although the member server that kept losing trust could reach all DCs, its *nearest* DC could not reach the PDC emulator DC in another site. This caused resync to fail on both the nearby DC and the affected member server. A direct VPN link from the nearby DC to the PDC emulator solved it for the DC, after which recycling w32time fixed the member.