APPLICATION N0TE ST-0123 November 16, 2005 Product: ShoreTel System System version: ShoreTel 6 Configuration of Microsoft Time Server Correctly configuring a time server that works is important so the correct time is shown on the IP Phones. ShoreTel recommends that in a production network the Time Services are hosted by the Domain controller. Overview There are four sections covered in this document; First section has two options for setting the Time Server. Second area covers selecting an internal or external time source for obtaining current time. Third area shows reference links to Microsoft web site with article numbers covering setting up a time server. And the last section covers has screen shots of a registry from a ShoreTel demo system. Option 1: Configuration Example via Group Policy: In this first option setting up the time server is done via the Group Policy editor. This is a GUI based solution and many would consider it easier then going into the regedit as shown in Option 2. If this option for some reason doesn t work then use Option 2. Setting up Time Server, from the OS click on Start Run. Next in the Open box type gpedit.msc and click OK A new window will open called Group Policy. From this window follow the directory down to Time Providers (Path: Local Computer Policy Computer Configuration Administrative Templates System Windows Time Service ). Then in the right window there will be a Setting called Enable Windows NTP Server, double click to open.
A new window will open up called Enable Windows NTP Server Properties. In this window click on the radio button for Enable. Next click OK to accept this will close the window. Go ahead and close the Group Policy window as well. Next from a command prompt type: net stop w32time && net start w32time. This will start up the time server with the new configurations settings.
Next test by booting up an IP Phone Once the IP Phone has booted up (with the handset hung up) press Mute + INFO (4636) + #. Then continue pressing the # sign until SNTP Server is shown, make sure it s showing the IP Address of the Time Server. Press * to exit the information menu on the IP Phone. Option 2: Configuration Example via Regedit: Example configuration for Win2003 Server, similar steps are used for Windows 2000 Server. We suggest this option only be used if Option 1 doesn t work. Note: ShoreTel STRONGLY recommends that only administrators with experience working in the registry attempt making modifications. Damage can occur and may make the system un-accessible should something be wrongly configured! It is also always recommended that the system or at least the registry is backed up before making changes! Configuring the Windows Time service to use an external time source To configure an internal time server to synchronize with an external time source, follow these steps: 1. Change the server type to NTP. To do this, follow these steps:
a. Click Start, click Run, type regedit, and then click OK. b. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type c. In the right pane, right-click Type, and then click Modify. d. In Edit Value, type NTP in the Value data box, and then click OK. 2. Set AnnounceFlags to 5. To do this, follow these steps: a. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlag b. In the right pane, right-click AnnounceFlags, and then click Modify. c. In Edit DWORD Value, type 5 in the Value data box, and then click OK. 3. Enable NTPServer. To do this, follow these steps: a. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpSe b. In the right pane, right-click Enabled, and then click Modify. c. In Edit DWORD Value, type 1 in the Value data box, and then click OK. Stop and Start the Windows Time service From a command prompt type: net stop w32time && net start w32time Internal clock or External time source Should the system not be part of a domain or if it s a domain controller there is an option in the Date and Time Properties page (Found in Control Panel or by double clicking on the time in your tool bar). In this window there will be a tab called Internet Time. Under this tab there are options to enable or disable Automatically synchronize with an Internet time server and selection of a time server. By default when used in the demo system this should be unchecked as the system is isolated.
Microsoft Reference Links Here are links on setting up a time server. www.technet.com KB article # 816042 for Win2003. Results 1-3 How to configure an authoritative time server in Windows Server 2003 (816042) - Provides step-by-step procedures that explain how to configure the Windows Time service. Also provides troubleshooting information and an introduction to Windows Time service synchronization. http://support.microsoft.com/default.aspx?scid=kb;en-us;816042 How to configure an authoritative time server in Windows 2000 (216734) - Discusses how to configure an authoritative time server in Windows 2000. Also discusses how to configure a reliable time source. http://support.microsoft.com/default.aspx?scid=kb;en-us;216734 How to configure an authoritative time server in Windows XP (314054) - Discusses configuring Windows Time service for internal and external time sources. Discusses reliable time source, manually-specified synchronization, all available synchronization, and some of the key Windows Time service registry entries.
Demo System Registry Example The images shown in this section are snap shots from a ShoreTel Demo System which was configured as a time source. Should something get miss configured use these images to help restore it to a working state. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProvide rs HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\NtpClient
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\NtpServer