How to synchronize time between all DC's in 1 Domain

What is the best way to sync the time between all 9 of my DC's in my Domain. I have a single Domain with 4 Sites. Plus can anyone tell me how important time synchronization is between my DC's and why?
crsrvnAsked:
Who is Participating?
 
wingateslConnect With a Mentor Commented:
Time syncronization is important for kerberos authentication to work. I think it is anything over 10 - 15 minutes difference and it fails. No kerberos, no DC (eventually)
 The easy way to sync the time is this
NET TIME \\TIMESRV /SET /YES
The MS way is this
http://support.microsoft.com/kb/307897/EN-US/
It still works for 2003 server
0
 
SteveH_UKCommented:
On the DC with the PDC role, you should use the command:

NET TIME /SETSNTP:...

You should not change other machines as they need to sync with the PDC and this will happen automatically.

See http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_22978705.html for a solution for UK time servers.

Where are you based?
0
 
markdormerCommented:
I would set one of them to synchronise with an external Stratum 1 NTP server and the rest will synchronise from that machine.

See these
http://www.ntp.org/
http://support.microsoft.com/kb/816042

http://technet2.microsoft.com/WindowsServer/en/library/b43a025f-cce2-4c82-b3ea-3b95d482db3a1033.mspx?mfr=true

http://blogs.msdn.com/w32time/default.aspx
0
What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

 
SteveH_UKCommented:
You should use a Stratum 2 NTP server, because you do not have atomic or satellite clock hardware.  You may need to set the flags in the registry, too.  See the question I referred to.
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
The answer selected is not entirely correct.  While the procedures described will work, the correct way is to set an SNTP server using the command SteveH_UK suggested on the DC with the PC Emulator role.  All domain systems - if properly configured - will synchronize their time with the PDC emulator ensuring all systems are correctly set.

Among other things, having a time on a DC that is significantly different can result in the failure of Exchange server, among other things (I know this from first hand experience - I recently moved and had one DC down for 10 days prior to the conversion to standard time (from daylight time) and when I brought the system back online a few days ago, it caused Exchange to stop functioning because it didn't automatically adjust the time as expected.
0
 
wingateslCommented:
The question did not read that he had a requirement to syncronize the PDC to the outside world therefor that was not included. The net time was used because it forces a refresh from the PDC.
0
 
SteveH_UKCommented:
I agree with wingatesl that it was not a request in the question.  The problem in using the computer time is that onboard clocks often have problems, and this can set you up for future problems.  That doesn't mean you can't do it, just that it isn't a recommended solution.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.