Microsoft KB Archive/305135

= The Windows 2000 and Windows Server 2003 Time service does not work through a proxy with Access Control enabled =

Article ID: 305135

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows Small Business Server 2003 Premium Edition
 * Microsoft Windows Small Business Server 2003 Standard Edition

-



This article was previously published under Q305135



SYMPTOMS
Assume that the Windows Time service (W32Time) on a Microsoft Windows Server 2003-based or Microsoft Windows 2000-based computer is set to run behind a proxy server, such as Microsoft Internet Security and Acceleration (ISA) Server 2004, Microsoft ISA Server 2000, Microsoft Proxy Server 2.0, or Microsoft Proxy Server 1.0. In this scenario, the Time service may not be able to connect to the external Network Time Protocol (NTP) Time service.



CAUSE
This issue occurs because the Windows Time service runs under the local system account on the internal server, and the Access Control feature is enabled on the proxy server.



RESOLUTION
To work around this issue, use any of the following methods:  Disable the Access Control feature for the Winsock proxy. The Enable Access Control check box is located on the Permissions tab in the properties of the Winsock Proxy service in Microsoft Internet Information Services (IIS) Manager. To disable the Access Control feature, click to clear the check box. Set the computer to access the proxy server for its NTP server, and configure the proxy to point to the external Time service. On Windows 2000 Server Editions, use a batch file with the following commands on the internal computer:

net stop w32time

w32tm -once

net start w32time

Use the Scheduler tool to run the batch file daily.

Note The batch file method is unavailable on Windows Server 2003



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
For more information about the Windows 2000 Time service, click the following article number to view the article in the Microsoft Knowledge Base:

216734 How to configure an authoritative time server in Windows 2000

You can also view the &quot;Windows Time Service&quot; white paper at the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/Windows2000Pro/maintain/w2kmngd/16_2kwts.mspx

Additional query words: w32time.exe

Keywords: kbenv kbprb KB305135

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.