Get-TimeSetttings ignore Policies Entries

Question

Get-TimeSetttings ignore Policies Entries

ruddj opened this issue 5 years ago · comments

Good Day,
First great job on the tool. It helped us identify some things we need to look at in our environment.
2 Comments about the Time settings check.

The Get-TimeSetttings command seems to ignore entries in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32time
We use a group policy with WMI filter for PDC to configure our NTP time server, but report does not pick up the changed values.

2nd is the TimeSynchronizationExternal check always checks pool.ntp.org which may be blocked by environments that don't allow internet access from their DCs. This is probably a more local config issue.

Przemysław Kłys · Answer 1 · Fri Sep 13 2019 14:23:52 GMT+0800 (China Standard Time)

Thank you. Will verify why is that.
What would you suggest? I could probably allow edit of that parameter via Parameters section like it is possible for Test parameters.

Przemysław Kłys · Answer 2 · Fri Sep 13 2019 14:26:41 GMT+0800 (China Standard Time)

        $TimeParameters = Get-PSRegistry -ComputerName $_ -RegistryPath "HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Parameters"
        $TimeConfig = Get-PSRegistry -ComputerName $_ -RegistryPath "HKLM\SYSTEM\CurrentControlSet\Services\W32Time\Config"
        $TimeNTPClient = Get-PSRegistry -ComputerName $_ -RegistryPath "HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient"
        $TimeNTPServer = Get-PSRegistry -ComputerName $_ -RegistryPath "HKLM\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPServer"
        $TimeVMProvider = Get-PSRegistry -ComputerName $ComputerName -RegistryPath "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\VMICTimeProvider"

Yes, it seems I am only checking this. I guess I need to expand on your registry keys

Przemysław Kłys · Answer 3 · Fri Sep 13 2019 14:28:01 GMT+0800 (China Standard Time)

https://docs.microsoft.com/en-us/windows-server/networking/windows-time-service/windows-time-service-tools-and-settings

James Rudd · Answer 4 · Fri Sep 13 2019 14:30:59 GMT+0800 (China Standard Time)

Possibly allow parameter that could be set in configuration file? In our case we have a specific external server we can access that we could override the value with.

Przemysław Kłys · Answer 5 · Fri Sep 13 2019 21:11:58 GMT+0800 (China Standard Time)

Ok, both problems should be now fixed. Hope you can test when a new version gets released.

James Rudd · Answer 6 · Mon Sep 16 2019 07:24:54 GMT+0800 (China Standard Time)

Thank you. I will update and test when next release is pushed to Powershell Gallery.