Sprucing up the office computers is a lot more affordable than replacing them.
Your PC is a year or two old. It takes forever to boot. It runs slower. And you’re running out of disk space.
Time to buy a new one, right?
Nope. The problem isn’t your computer—the problem is what you’ve allowed to happen to your computer.
According to Chris Cope, the founder and CEO of SlimWare Utilities, a company that provides a suite of products to clean, repair, update, and optimize personal computers, removing optional applications and unnecessary start-up items can increase boot speed by over 40 percent—and free up a ton of hard drive space.
So I asked Cope for simple ways to dramatically increase the performance of any PC.
We'll start by pretending—since the same advice applies to an old computer—that you just bought a new computer and want to get off to the right start:
What to remove: New computers come with a variety of pre-installed programs. Many run at start-up and stay running in the background. Applications you probably don’t need include games, programs that provide support and documentation, online shopping applications, a browser (or two) you’ll never use, games, and some antivirus software.
Go to Control Panel –> Add or Remove Programs and remove what you don’t need. Or use SlimWare’s SlimComputer; it’s free.
Keep in mind most pre-installed antivirus programs are the result of an arrangement between the computer manufacturer and the antivirus provider. Since you need antivirus protection, first determine if the installed program is one you already own, since many subscription-based applications can be transferred.
If you don't own antivirus software and don't want to pay, there are several good free antivirus programs. Microsoft Security Essentials is one, and AVG and Avast are also very popular.
“Decide which antivirus software you’ll use,” Cope says, “and make sure you uninstall any you won’t use, including, if you’re not going to pay for it when the trial runs out, whatever came pre-installed. A lot of people have two or more antivirus programs installed, and leaving two running is a leading cause of lockups, blue screens, and other problems.”
What to update: Always keep Windows updated. Go to Start –> Programs –> Windows Update and turn on automatic updates.
Then update your installed drivers; some have bugs that have been fixed. If you don’t know how to find and update your drivers, try SlimDrivers, SlimWare’s free driver maintenance and update utility.
Then update Adobe Acrobat (or Reader) and Java. “Adobe and Java are two programs that, if not updated, create significant risk of infection,” Cope says. “When a security flaw is found, they update their software and announce the reasons for the update. If you don't install the update, that’s a little like telling criminals how to break into your house. Always keep those two programs updated.”
What to install: Then install any programs, like Office, that you plan to use if not already installed.
“Just don’t install ‘maybe’ programs,” Cope says. “You won’t remember to uninstall them.”
Then once your computer is cleaned up, updated, and antivirus protection is in place, use imaging or back-up software to create an optimized back-up. Norton Ghost is one popular product. That way if something happens later you can easily restore your computer.
Now let’s look at how to improve the performance of an older computer.
What to clean up: Start with files. “Computers that haven’t been cleaned in about a year,” Cope says, “typically have about 10 gig of data files: history files, log files, temp files, recently stored files, etc. That makes your hard driver work harder and perform slower.”
One way to clean up old files is through Start –> Accessories –> System Tools –> Disk Cleanup and Disk Defragmenter. Or you can use SlimWare’s SlimCleaner, a tool that uses community-sourced feedback to clean and optimize PCs.
Then focus on removing unused applications and programs. You may have installed a program by accident or downloaded a program you stopped using and never removed. Check out all your applications and make sure they’re still relevant and necessary.
Then check out your browser. Over time you probably installed a number of plugins, toolbars, and extensions that not only slow down your browser but also clutter your screen—and make you more vulnerable to viruses, especially if you don’t keep them all updated. Remove what you don’t need (which, if you’re like me, is about 80 percent of what you’ve installed.)
What to add: “Once your computer is clean,” Cope says, “the best way to further boost performance is by adding RAM.”
In most cases you can double the amount of RAM on your computer for $100 or so. (I tripled the RAM on my old computer for about $130.)
How it turned out: I decided to test Cope’s advice on a computer in my office that’s at least eight years old. (Hey, it's a great conversation starter.)
I’m reasonably computer savvy so I started by removing programs and drivers manually. That got old really fast so I tried SlimWare’s free tools: First I ran SlimComputer, then SlimDrivers, then SlimCleaner.
They're easy to use, and they work. I found a lot of stuff I didn’t know was on the computer. And it was cool to see what the SlimWare community says about specific programs and applications. In some cases I took the crowd’s advice, in others I didn’t, but either way I learned a lot.
So what were my results? I freed up 33 gig of hard drive space. I removed 17 programs, including four that ran at start-up. Even before I added RAM the computer booted up in less than half the time, applications like Photoshop started up about 20 percent faster, and memory-intensive functions within Photoshop also ran a lot faster.
Performance improved even more after I added RAM.
Time to buy a new computer? Nope.
http://www.inc.com/jeff-haden/free-ways-to-clean-up-pcs.html
Showing posts with label Windows. Show all posts
Showing posts with label Windows. Show all posts
1/25/11
How to avoid Malware
What is malware?
The term "malware" comes from the two words "malicious software," and refers to any software that is designed to cause damage to a computer, server, or network.
Viruses, spyware, worms, key loggers, and Trojans are examples of malware. If you click links that are disguised as images, audio, or video files which might appear on suspicious websites or in Instant Messages (IMs) or email messages, you might expose your computer to malware. In some cases, malware can even be hidden in files that have been uploaded to reputable websites. Malware can:
•Corrupt data.
•Slow down your computer.
•Use your email or instant message(IM) program to spread itself to other computers.
•Erase everything on your computer.
•Result in identity theft or give a criminal access to your web accounts.
1. Don't use file sharing applications. If I see Limewire, Bearshare, or Kazaa on a program list in a PC I can find malware approximately 100% of the time. There is simply no way to safely download with these programs because you can't trust the source.
2. Never open an email attachment if you don't know what it is. Even if you know the person who sent the email beware of attachments. Many computers with infections will send out email to everyone on their address book without the owner ever being aware.
3. If you get pop-ups when opening a web page don't click inside the pop-up to close it. Always click the red "x" in the upper right corner. The "cancel" or "close" button in the pop-up might have unintended effects. clicking inside the pop-up allows code to run that may not be what the button indicates. ie. by clicking inside the pop-up you may be allowing a virus to take control of your computer.
4. If you get a message from your computer warning you that it is infected and you need to download suchandsuch software to remove the virus, don't do it. At this point you are already infected, downloading the fake virus remover will only make it worse. No legit software ever uses this tactic.
5. Avoid free downloads unless you are absolutely sure you can trust the source. Often these freebies are packaged with a good deal of adware, so be careful.
Most of the time good common sense will keep your computer safer than whatever virus protection you have installed. Start practicing safe web viewing and you will find you rarely have a problem with malware.
The term "malware" comes from the two words "malicious software," and refers to any software that is designed to cause damage to a computer, server, or network.
Viruses, spyware, worms, key loggers, and Trojans are examples of malware. If you click links that are disguised as images, audio, or video files which might appear on suspicious websites or in Instant Messages (IMs) or email messages, you might expose your computer to malware. In some cases, malware can even be hidden in files that have been uploaded to reputable websites. Malware can:
•Corrupt data.
•Slow down your computer.
•Use your email or instant message(IM) program to spread itself to other computers.
•Erase everything on your computer.
•Result in identity theft or give a criminal access to your web accounts.
1. Don't use file sharing applications. If I see Limewire, Bearshare, or Kazaa on a program list in a PC I can find malware approximately 100% of the time. There is simply no way to safely download with these programs because you can't trust the source.
2. Never open an email attachment if you don't know what it is. Even if you know the person who sent the email beware of attachments. Many computers with infections will send out email to everyone on their address book without the owner ever being aware.
3. If you get pop-ups when opening a web page don't click inside the pop-up to close it. Always click the red "x" in the upper right corner. The "cancel" or "close" button in the pop-up might have unintended effects. clicking inside the pop-up allows code to run that may not be what the button indicates. ie. by clicking inside the pop-up you may be allowing a virus to take control of your computer.
4. If you get a message from your computer warning you that it is infected and you need to download suchandsuch software to remove the virus, don't do it. At this point you are already infected, downloading the fake virus remover will only make it worse. No legit software ever uses this tactic.
5. Avoid free downloads unless you are absolutely sure you can trust the source. Often these freebies are packaged with a good deal of adware, so be careful.
Most of the time good common sense will keep your computer safer than whatever virus protection you have installed. Start practicing safe web viewing and you will find you rarely have a problem with malware.
8/29/09
Remote Desktop Nirvana
Every once in a while, I stumble across some feature, option, utility, or application that simultaneously makes me say "Wow! That's amazing!", and "D'oh! I should have known about that!". These are great features / options / utilities / apps that are no secret, but aren't necessarily well publicized.
I received an e-mail at 9:30pm this Saturday evening from a client who suddenly started getting errors from a GP related SQL Server job. We started a GoToMeeting session to look at the SQL Server issue, and as soon as I saw his desktop I noticed something out of the ordinary. He said "We're looking at Server A now, but if you want to look at Server B, just click it in the list on the left."
This is what I saw:
Never having seen this before, I asked him if this was some type of 3rd party server management app that he uses--perhaps like a VNC or Citrix management console of some kind, something I have seen at other clients. "No, it's just part of the Server 2003 Admin Pack."
Sure enough, this is a fantastic utility included in the free Windows Server 2003 Administration Tools Pack. The tools pack includes several tools, but the one I was most interested in is the "Remote Desktops" MMC snap-in.
The Tools can be downloaded here. Just make sure to download the SP1 version, as the original version, which is still available for download, does not allow you to connect to a Terminal Server running on a port other than 3389. After installation, the Remote Desktops app should appear under your Administrative Tools program group.
This MMC snap-in allows you to save multiple RDP profiles in a single place, avoiding the need for multiple RDP files ( I currently have 13 of them sitting on my desktop) or hunting through the MRU (most recently used) list on the Remote Desktop Connection app window. Once you setup the server connections, with just a single click on a server name on the left, you can quickly login to a server and also switch from one RDP session to another.
It doesn't offer all of the connection options of the Terminal Services Client, but I generally don't need the extra options:
And something that I find very valuable: It allows you to have an RDP session that will automatically fill the MMC window, regardless of size or aspect ratio. You can choose to fill the MMC window, choose a standard desktop size, or even specify a custom resolution.
So I'm no longer limited to the standard 1024, 1280, or full screen options. (That is actually the only feature I appreciated in Virtual PC vs. virtual server--the ability to dynamically resize the VPC window.) I like the size and convenience of the Terminal Server Client full screen mode, but it's a hassle when I need to minimize or move the RDP window out of the way, or when I have to work with multiple sessions in full screen mode.
The Remote Desktops app effectively let's me have several simultaneous near-full-screen sessions in a single desktop app. Very handy when jumping between different servers throughout the day.
If you are only working in a single RDP connection at a time, the standard MS TSC app in full screen mode is great, as it gives you ALT+Tab, the Windows key, and other shortcuts that aren't available otherwise. But if you have to bounce between multiple servers, the Remote Desktops utility is much more convenient.
Because it is an MMC snap-in, it does have the standard MMC navigation and UI quirks, but given what it offers, it's a great solution.
UPDATE: Reader Jivtesh brought up an excellent point: What about this feature in Server 2008? He informed me that it is a standard feature in Windows Server 2008, but after looking for it, I didn't see an icon for it under Administrative Tools.
It appears that it may not have an icon by default in Server 2008, but it is present by default, and is very easy to get working.
Here is the KB article with instructions.
To open Remote Desktops from the MMC
You can then do File --> Save As to save an MSC file that you can launch to open Remote Desktops.
I received an e-mail at 9:30pm this Saturday evening from a client who suddenly started getting errors from a GP related SQL Server job. We started a GoToMeeting session to look at the SQL Server issue, and as soon as I saw his desktop I noticed something out of the ordinary. He said "We're looking at Server A now, but if you want to look at Server B, just click it in the list on the left."
This is what I saw:
Never having seen this before, I asked him if this was some type of 3rd party server management app that he uses--perhaps like a VNC or Citrix management console of some kind, something I have seen at other clients. "No, it's just part of the Server 2003 Admin Pack."
Sure enough, this is a fantastic utility included in the free Windows Server 2003 Administration Tools Pack. The tools pack includes several tools, but the one I was most interested in is the "Remote Desktops" MMC snap-in.
The Tools can be downloaded here. Just make sure to download the SP1 version, as the original version, which is still available for download, does not allow you to connect to a Terminal Server running on a port other than 3389. After installation, the Remote Desktops app should appear under your Administrative Tools program group.
This MMC snap-in allows you to save multiple RDP profiles in a single place, avoiding the need for multiple RDP files ( I currently have 13 of them sitting on my desktop) or hunting through the MRU (most recently used) list on the Remote Desktop Connection app window. Once you setup the server connections, with just a single click on a server name on the left, you can quickly login to a server and also switch from one RDP session to another.
It doesn't offer all of the connection options of the Terminal Services Client, but I generally don't need the extra options:
And something that I find very valuable: It allows you to have an RDP session that will automatically fill the MMC window, regardless of size or aspect ratio. You can choose to fill the MMC window, choose a standard desktop size, or even specify a custom resolution.
So I'm no longer limited to the standard 1024, 1280, or full screen options. (That is actually the only feature I appreciated in Virtual PC vs. virtual server--the ability to dynamically resize the VPC window.) I like the size and convenience of the Terminal Server Client full screen mode, but it's a hassle when I need to minimize or move the RDP window out of the way, or when I have to work with multiple sessions in full screen mode.
The Remote Desktops app effectively let's me have several simultaneous near-full-screen sessions in a single desktop app. Very handy when jumping between different servers throughout the day.
If you are only working in a single RDP connection at a time, the standard MS TSC app in full screen mode is great, as it gives you ALT+Tab, the Windows key, and other shortcuts that aren't available otherwise. But if you have to bounce between multiple servers, the Remote Desktops utility is much more convenient.
Because it is an MMC snap-in, it does have the standard MMC navigation and UI quirks, but given what it offers, it's a great solution.
UPDATE: Reader Jivtesh brought up an excellent point: What about this feature in Server 2008? He informed me that it is a standard feature in Windows Server 2008, but after looking for it, I didn't see an icon for it under Administrative Tools.
It appears that it may not have an icon by default in Server 2008, but it is present by default, and is very easy to get working.
Here is the KB article with instructions.
To open Remote Desktops from the MMC
Click Start, click Run, type mmc in the Open box, and then click OK.
On the File menu, click Add/Remove Snap-in.
In the Available snap-ins list, click Remote Desktops, and then click Add.
Click OK.
You can then do File --> Save As to save an MSC file that you can launch to open Remote Desktops.
8/3/09
Monitor Windows User Log In and Log Off without software
This is a great little batch file that enables an admin to keep a log of where, when and what computer user log on to and when they log off.
1. Set up a Share on the network.
The batch file is actually two files. One runs at user log on and one runs at user log off. When the batch files run, they create a rolling log file with the details in a shared network folder.
1) Create a shared folder on the network. Mine is called Logs. Everyone should have full access to this share.
2) In that folder, create a folder called User and a folder called Computer.
2. Create the batch files.
Copy and Paste the following into two separate text files. When you save them, remember to change the file type to .bat
Name: Log On.bat
rem The following line creates a rolling log file of usage by workstation
echo Log In %Date% %TIME% %USERNAME% >> \\servername\Logs\Computer\%COMPUTERNAME%.log
rem The following line creates a rolling log file of usage by user
echo Log In %Date% %TIME% %COMPUTERNAME% >> \\servername\Logs\User\%USERNAME%.log
Name: Log Off.bat
rem The following line creates a rolling log file of usage by workstation
echo Log Off %Date% %TIME% %USERNAME% >> \\servername\Logs\Computer\%COMPUTERNAME%.log
rem The following line creates a rolling log file of usage by user
echo Log Off %Date% %TIME% %COMPUTERNAME% >> \\servername\Logs\User\%USERNAME%.log
Put these files in the Logs folder.
3. Add the batch files to group policy.
You do this on your User Container GPO.
User Configuration > Windows Settings > Scripts
Add Log In.bat to the Logon scripts box and Log Off.bat to the Logoff scripts box
7/23/09
Terminal Services Shortcut Keys
Useful Client Shortcut Keys
| Key combination | Function | Similar local keys |
|---|---|---|
| CTRL+ALT+END | Opens the Windows Security dialog box | CTRL+ALT+DELETE |
| CTRL+ALT+BREAK | Toggles the Terminal Services client display from window to full screen | |
| ALT+INSERT | Cycles through running programs on the remote computer | ALT+TAB |
| ALT+HOME | Displays the remote computer's Start menu | |
| ALT+DELETE | Displays the remote window's Control menu | ALT+SPACE BAR |
You can take screenshots with these shortcuts:
| Key combination | Function | Similar local keys |
|---|---|---|
| CTRL+ALT+NUMBER PAD MINUS | Places an image of active window onto the TS clipboard | ALT+PRINT SCREEN |
| CTRL+ALT+NUMBER PAD PLUS | Places an image of the entire Terminal Services client on the Terminal Services clipboard |
7/18/09
Clean Install Windows XP
OR
Clean Install Windows XP
I’ve made no secret of my feelings about doing upgrade installations of Windows XP. My personal experience has shown that very seldom, if ever, do you realize the full potential of a new operating system when it’s installed as an upgrade. The most meticulous of users can’t guard against all the stray files, drivers, and registry entries that creep into a system through normal use. I see no sense in starting out at a disadvantage. All the little problems that existed before the upgrade are likely to make the transition right along with the new operating system. So, that said, what’s involved in doing a clean install of Windows XP?
The Preparation
A clean install in Windows XP is a very straightforward process. Just as there are certain things that need to be done to ensure a successful upgrade, the same care is needed with a clean install. First, check the requirements for Windows XP. A box that just squeaks by on the minimum requirements is not going to make you happy with XP. Truthfully, it’s a recipe for disaster. XP has many nice features, but they do require a box which has the oomph to power them adequately. Check the requirements for the appropriate version using the links below.
Windows XP Home Edition System Requirements
Windows XP Professional Edition System Requirements
If the computer is up to snuff, the next step is to check the rest of the hardware against the Windows XP Hardware Compatibility List to see if it’s supported. It’s possible, even likely, that one or more of your items won’t be on the list. That doesn’t mean you have to replace them or that they won’t work with XP, but it does mean you should visit the manufacturer site to check for XP drivers. In some cases the Windows 2000 drivers will work just fine. The point is, make sure you have the drivers downloaded and saved where they will be available during the XP installation. Drivers for RAID and SCSI devices fall into this same category. Make sure they are available at the beginning of the installation process.
Microsoft has made available on their website some excellent documentation regarding upgrading to Windows XP. I strongly suggest it be read before a final decision is made. A number of other articles are linked from the one below, including a download location for the Microsoft Windows Upgrade Advisor. Even though it's a 35MB download, running it will alert you to any hardware and software problems that may be encountered in your XP installation.
Description of the Windows XP Upgrade Advisor (Q307726)
If you aren’t familiar with the differences between FAT32 and NTFS file systems, now is the time to rectify that situation. This will be the most important decision you have to make during the installation process so a bit of knowledge can be very valuable. See the article linked below.
Description of the FAT32 File System in Windows XP (Q310525)
Make sure that the installation CD’s for every program you use are available as well as the media that qualifies you to be doing a Windows XP installation. Once you wipe the drive there is no magical set of keystrokes that will get your programs and data back, which brings me to the final point for this section. Back up your data, test and verify the backup, and be sure the backup device you used will be available under Windows XP. With the previous tasks completed, it’s onward to the actual installation.
The Installation
There are two methods available for installing Windows XP, both requiring the first step of booting your machine. You’re in luck if the box is capable of booting from the CD-ROM drive since the Windows XP CD’s are bootable. No, XP isn’t available on floppies, and even if it was you’d need a two week vacation to do the installation. If the computer doesn’t support booting from the CD, you’ll need a set of Setup Startup Disks, but here is a final caution before you go this route. Most computers that will be happy running XP have the capability to boot from the CD. It’s probably a red flag if you need the startup disks, so take one more look at the minimum and recommended requirements for running Windows XP. If it’s still a go, download the file that will create the disk sets for either the Home Edition or the Professional Edition. Make the disk set, boot the computer and insert the XP CD to begin the installation.
For boxes that support booting from the CD, the following steps will get you through the clean install of Windows XP.
Fire up the computer and insert the XP CD.
Watch the monitor for the message that the CD has been auto-detected, followed by the “Press any key to boot CD” message. Don’t fall for the old joke about looking for the “Any” key and just hit the spacebar or any other key that’s convenient within the five second time span the message will be displayed.
When I first put together this guide to a clean install of XP I didn't think there would be a big problem with ACPI BIOS detection. I was wrong, so I've inserted this section relating to Advanced Configuration and Power Interface (ACPI) detection in the hope of saving users a lot of grief over XP not shutting down properly. The identical information is also included on the page about Shutdown Problems.
|
Files will start to load from the CD to begin the installation. Eventually you’ll be asked if you want to install Windows XP. No need to type an essay here on why you’ve made the decision to do the installation. Just hit Enter.
Next is the End User License Agreement or EULA which must be accepted to continue installation. Press F8 to accept, F3 to bail out now. You can read the EULA if you want, but it adds two days to the installation time.
The next screen displays the available partitions where XP can be installed. Select the one you want and tap that Enter key again to move on to the screen where you select a file system.
It’s time for that important decision. FAT32 versus NTFS. The preferred choice is NTFS. It allows security features and stability that aren’t possible with FAT32. Apply the knowledge you gained during the preparation phase at this point. Make your choice of formatting options and press the F key to start the process. Once the format process completes the installation will continue.
If you are installing from a full version Windows XP CD the installation continues without intervention. If you’re using an upgrade version CD this is where Microsoft confirms your eligibility by requesting the media that allows you to use the upgrade version. Insert your media in the drive, let the verification complete and reinsert the XP CD when prompted.
Setup continues and eventually the computer will reboot. Watch the onscreen prompts but do not press a key when the “Press any key to boot CD” message appears.
Installation will continue, prompting you from time to time to supply some additional setup information. Feed the prompts with appropriate responses and eventually another reboot will occur, this time bringing you back into Windows XP, depositing you at the Windows Activation screen.
You can either activate your copy of XP now or delay the activation for up to 30 days and suffer the periodic activation reminders. I suggest you activate now and register at the same time. It’s really painless. In any case, activation is required at some point or after 30 days you’ll be denied access to the desktop. Registration is entirely optional.
The last step is to enter a username and watch the XP desktop appear, ready for use.
Congratulations. You’ve just completed a clean install of Windows XP. Look around, explore, play with the settings and start installing applications and transferring your data backup. You’re not in Kansas anymore. This is Windows XP.
7/7/09
Open additional Exchange mailboxes
This feature requires you to be using a Microsoft Exchange Server e-mail account.
If you have delegate access permission for other Exchange mailboxes, you can specify which mailboxes to open in Microsoft Outlook.
- On the Tools menu, click E-mail accounts, select View or change existing e-mail accounts, click Next, select the Exchange account, and then click Change.
- Click More Settings, then click the Advanced tab.
- Under Mailboxes, click Add, and then select the mailboxes to add.
http://office.microsoft.com/en-us/outlook/HP010030561033.aspx
6/2/09
How to change net time servers in Windows
How to change net time servers in Windows
Accurate time settings in Windows is crucial, especially if one is using Kerberos for authentication. This is because Kerberos relies on time stamps as a part of its security token mechanism. As long as all of your clients and servers are synching time, then Kerberos will work pretty well. But what if you also want your clocks to maintain accuracy? Like, atomic clock accuracy?I had a user in one of our remote offices complain that her workstation clock was three minutes off of her digital atomic clock that she always uses. I looked at the time on my workstation and noticed the same thing. I decided to see what time servers our Domain Controllers were syncing to. Can you take a guess? That's right, they were set to sync with time. microsoft.com. I wanted to change the time servers to a more accurate group, so I decided on using the time servers at ntp.org. According to many websites I have visited, the NTP.org servers are more accurate, and more reliable that the Microsoft time server (Can anyone substantiate that for me?).Want to know what I did to set the ntp servers as the default time servers? Simple, from the command line I ran the following command:
net time /setsntp:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org"
This set the server to use the following time servers in a round robin format:
0.pool.ntp.org
1.pool.ntp.org
2.pool.ntp.org
After that I restarted my w32time services to make the changes active right away:
net stop w32time
net start w32time
After the services came back up, the last thing I wanted to do was to force synchronization with the new time servers, so I ran the following command:
w32tm /resync /rediscover
BAM! Time was correct again! Now by default in a Windows 2003 domain environment all clients and member servers are supposed to automatically sync with the primary domain controller. That is good news for you, because you only have to make this change on your primary DC.If you don't want to use the NTP.org servers, here is a list of other time servers provided by NIST.gov: (List of time servers)
Accurate time settings in Windows is crucial, especially if one is using Kerberos for authentication. This is because Kerberos relies on time stamps as a part of its security token mechanism. As long as all of your clients and servers are synching time, then Kerberos will work pretty well. But what if you also want your clocks to maintain accuracy? Like, atomic clock accuracy?I had a user in one of our remote offices complain that her workstation clock was three minutes off of her digital atomic clock that she always uses. I looked at the time on my workstation and noticed the same thing. I decided to see what time servers our Domain Controllers were syncing to. Can you take a guess? That's right, they were set to sync with time. microsoft.com. I wanted to change the time servers to a more accurate group, so I decided on using the time servers at ntp.org. According to many websites I have visited, the NTP.org servers are more accurate, and more reliable that the Microsoft time server (Can anyone substantiate that for me?).Want to know what I did to set the ntp servers as the default time servers? Simple, from the command line I ran the following command:
net time /setsntp:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org"
This set the server to use the following time servers in a round robin format:
0.pool.ntp.org
1.pool.ntp.org
2.pool.ntp.org
After that I restarted my w32time services to make the changes active right away:
net stop w32time
net start w32time
After the services came back up, the last thing I wanted to do was to force synchronization with the new time servers, so I ran the following command:
w32tm /resync /rediscover
BAM! Time was correct again! Now by default in a Windows 2003 domain environment all clients and member servers are supposed to automatically sync with the primary domain controller. That is good news for you, because you only have to make this change on your primary DC.If you don't want to use the NTP.org servers, here is a list of other time servers provided by NIST.gov: (List of time servers)
Subscribe to:
Comments (Atom)