Wemmer
Finding time source of Windows system using C# (equivalent of w32tm /query /source)
Definitely a bit out of my depth with understanding everything that Process Monitor spits out...
But just going by what it does in regards to the registry, it doesn't seem to do anything with anything in
But just going by what it does in regards to the registry, it doesn't seem to do anything with anything in
...CurrentControlSet\Services\W32Time\ whatsoever, and whatever else it reads from the registry doesn't to me make much sense as relevant for the query.
However, svchost does access those keys, but again, there's nothing there that actually determines the effective time source. For example, a server might have the value NtpServer set to time.windows.com,0x8 but w32tm /query /source will still respond with the name of a domain controller that in practice provides the time.4 replies