Forum Discussion

Iron Contributor

Apr 21, 2020

Solved

Setting Time on Domain

I am wanting to configure Time on my Domain Controller running Server 2016 so that all my other servers and workstations show the same time. Are there any simple step by step instructions on how to d...

Dave Patrick
Apr 21, 2020
All domain members should use NT5DS domain time.

Desktops and member servers sync with any domain controller.

Domain controllers sync with PDC emulator (one per domain)

PDC emulator in child domain can sync with any domain controller in parent domain.

PDC emulator in parent domain syncs with either a hardware clock or possibly an external source.
https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

for all domain members (aside from PDCe) should have happened by default but you can confirm by running;

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /syncfromflags:domhier /update
net stop w32time
net start w32time

then check

w32tm /query /source
w32tm /query /configuration

-----------------------------------------------

for the PDCe

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /manualpeerlist:<preferred ip address> /syncfromflags:manual /reliable:yes /update
net stop w32time
net start w32time

then check

w32tm /query /source
w32tm /query /configuration

https://tf.nist.gov/tf-cgi/servers.cgi

(please don't forget to mark helpful replies)

Dave Patrick

MVP

Apr 21, 2020

All domain members should use NT5DS domain time.
Desktops and member servers sync with any domain controller.
Domain controllers sync with PDC emulator (one per domain)
PDC emulator in child domain can sync with any domain controller in parent domain.
PDC emulator in parent domain syncs with either a hardware clock or possibly an external source.
https://blogs.technet.microsoft.com/nepapfe/2013/03/01/its-simple-time-configuration-in-active-directory/

for all domain members (aside from PDCe) should have happened by default but you can confirm by running;

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /syncfromflags:domhier /update
net stop w32time
net start w32time

then check

w32tm /query /source
w32tm /query /configuration

-----------------------------------------------

for the PDCe

w32tm /unregister
net stop w32time
w32tm /register
net start w32time
w32tm /config /manualpeerlist:<preferred ip address> /syncfromflags:manual /reliable:yes /update
net stop w32time
net start w32time

then check

w32tm /query /source
w32tm /query /configuration

https://tf.nist.gov/tf-cgi/servers.cgi

(please don't forget to mark helpful replies)

Darren Durgha
Copper Contributor
Apr 26, 2020
Dave Patrick.
Thank you . I recently had few issues with PDC time sync which points to infoblox ntp and used a lot command on your list, the stratum numbering help resolved my issue .

The highest stratum supported is 15, and my Infoblox stratum was showing 14, which makes the PDC a stratum 15 – all other DCs will be a Stratum 16 or more which is unsupported.

Just a tip in case anyone run into Domain hierarchy time issues using third party ntp time source