Time service issue: w32tm /resync fails with "access is denied" (0x80070005)

Hi,

we have at this moment mixed OS of Domain Controller:

- Windows Server 2016 (W2K16)

- Windows Server 2008 R2 (W2K8R2)

All FSMO roles are on W2K16 DCs.

We have a Time Service issue on W2K8R2 DCs for a few days.

First, we have seen that "Time Service" (w32tm) were no any more existing on DCs. 

PS> w32tm /resync
The following error occurred: The specified service does not exist as an installed service. (0x80070424)

We could register Time Service:

PS> w32tm /register
W32Time successfully registered.

But if we tried to start w32time we got following error:

PS> net start w32time
System error 1290 has occurred.
The service start failed since one or more services in the same process have an incompatible service SID type setting. A service with restricted service SID type can only coexist in the same process with other services with a restricted SID type. If the service SID type  for this service was just configured, the hosting process must be restarted in order to start this service.

Afterwards we run the following command:
PS>sc config w32time type= own
[SC] ChangeServiceConfig SUCCESS

Then we could start w32time.

We checked also im Event Viewer time snyc of W2K8R2 DCs with PDC Emulator. All worked well.  

BUT, if we run time resync manually in elovated command, then we get error:

The same is also, if we want to unregister w32tm:

PS> w32tm /resync
The following error occurred: Access is denied. (0x80070005)

I debugged time service on problem DCs. All sync works well.

Any idea?

Best regards

Birdal