Is this an Active Directory envioronment?
In an Active Directory forest, the time service is synchronized by the time on the Primary Domain Controller for the root of the forest. Other domain controllers in the forest root synchronize with it.
In the child domains, the PDC emulator for the child domain synchs the time with the forest-root DC. The other DC's in the child domain synch with the PDC emulator for their domain.
Now to correct this issue, you need to do the following:
Check the root-forest PDC for the correct zone and time. If it is correct, the proceed to the zones and times on the other DC's in the forest-root. If they are not correct, start and stop the time service on that DC with the command:
net stop w32time
net start w32time
Once the roor-forest domain is checked, proceed to the check the PDC's for the child domains with the procedure described above.
If you want to synch with an outside time source on the forest root dc, the command would be:
net time /querysntp
net time /setsntp:tick.usno.navy.mil
When you again run the command net time /querysntp, you should see
The current SNTP value is: tick.usno.navy.mil
The command completed successfully.
You may need to stop and start the time service to see this.
This is a good paper on the issue:
http://www.microsoft.com/windows2000/techinfo/howitworks/security/wintimeserv.asp
