The Windows 2000 and Windows Server 2003 Time service does not work through a proxy with Access Control enabled (305135)


The information in this article applies to:

  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows Small Business Server 2003, Premium Edition
  • Microsoft Windows Small Business Server 2003, Standard Edition
This article was previously published under Q305135

SYMPTOMS

Assume that the Windows Time service (W32Time) on a Microsoft Windows Server 2003-based or Microsoft Windows 2000-based computer is set to run behind a proxy server, such as Microsoft Internet Security and Acceleration (ISA) Server 2004, Microsoft ISA Server 2000, Microsoft Proxy Server 2.0, or Microsoft Proxy Server 1.0. In this scenario, the Time service may not be able to connect to the external Network Time Protocol (NTP) Time service.

CAUSE

This issue occurs because the Windows Time service runs under the local system account on the internal server, and the Access Control feature is enabled on the proxy server.

RESOLUTION

To work around this issue, use any of the following methods:
  • Disable the Access Control feature for the Winsock proxy. The Enable Access Control check box is located on the Permissions tab in the properties of the Winsock Proxy service in Microsoft Internet Information Services (IIS) Manager. To disable the Access Control feature, click to clear the check box.
  • Set the computer to access the proxy server for its NTP server, and configure the proxy to point to the external Time service.
  • On Windows 2000 Server Editions, use a batch file with the following commands on the internal computer:

    net stop w32time
    w32tm -once
    net start w32time

    Use the Scheduler tool to run the batch file daily.

    Note The batch file method is unavailable on Windows Server 2003

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about the Windows 2000 Time service, click the following article number to view the article in the Microsoft Knowledge Base:

216734 How to configure an authoritative time server in Windows 2000

You can also view the "Windows Time Service" white paper at the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/Windows2000Pro/maintain/w2kmngd/16_2kwts.mspx

Modification Type:MinorLast Reviewed:4/7/2006
Keywords:kbenv kbprb KB305135
©2004 Microsoft Corporation. All rights reserved.