Time sync problems with Hyper-V Guests

If you have time sync problems with Hyper-V Guest Systems there is a simple solution for this.

Problems:

  • Time between Server and Active Directory Domain Controller is not correct
  • Can’t login because of this
  • Can’t add AD Users to local groups

Solution:

To solve this problem you have to disable Time Synchronization in the Hyper-V Integration Services for each guest. Then restart the Windows Time serviceon the guest. The guests will then correctly synchronize with a domain controller.

Active Directory Schema Versions

The list of Active Directory Schema versions:

  • Windows 2000 RTM with all Service packs = Schema version 13
  • Windows Server 2003 RTM with all Service packs = Schema version 30
  • Windows Server 2003 R2 RTM with all Service packs = Schema version 31
  • Windows Server 2008 RTM with all Service packs = Schema version 44
  • Windows Server 2008 R2 RTM with all Service packs = Schema version 47

Check the schema version in the Registry:

HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\<Schema Version>

Check the schema version with dsquery:

dsquery * CN=Schema,CN=Configuration,DC=Root-Domäne -Scope Base -attr objectVersion