Domain Time Synchronization in the Age of Working from Home

BrandonWilson If you are still working at Microsoft, wtf were you guys thinking bringing this consumer PCs stuff to a AD domain controller?

https://arstechnica.com/security/2023/08/windows-feature-that-resets-system-clocks-based-on-random-data-is-wreaking-havoc/ 

My company is a victim to this horrible descision of Microsofts, the PDC domain controller date and time was thrown 5 months into the future for 7 minutes despite being using NTP sync with time.windows.com. The results are nothing less than catastrophic , Kerberos authentication failures, production SQL database audit trail with the wrong date, gMSA accounts failure ,Windows Hello failure and I think we are only seeing the tip of the iceberg.

This is absolut the worst shitshow I have ever experienced in my 30 years in IT from Microsoft.