chaning time zone through active directory GPO

I have windows time service enabled in the DC GPO (see settings). But some of the client clocks seem to be off by several hours. Could this be a local machine time zone issue or is this a GPO conflict? How can I use GPO to make all time zones EST? if that is the issue?
System/Windows Time Servicehide
Policy Setting 
Global Configuration Settings Enabled 
Clock Discipline Parameters 
FrequencyCorrectRate 4 
HoldPeriod 5 
LargePhaseOffset 1280000 
MaxAllowedPhaseOffset 300 
MaxNegPhaseCorrection 54000 
MaxPosPhaseCorrection 54000 
PhaseCorrectRate 1 
PollAdjustFactor 5 
SpikeWatchPeriod 90 
UpdateInterval 30000 
General Parameters 
AnnounceFlags 10 
EventLogFlags 2 
LocalClockDispersion 10 
MaxPollInterval 15 
MinPollInterval 10 
 
 
System/Windows Time Service/Time Providershide
Policy Setting 
Configure Windows NTP Client Enabled 
NtpServer time.windows.com,0x1 
Type NT5DS 
CrossSiteSyncFlags 2 
ResolvePeerBackoffMinutes 15 
ResolvePeerBackoffMaxTimes 7 
SpecialPollInterval 3600 
EventLogFlags 0 
 
Policy Setting 
Enable Windows NTP Client Enabled 
Enable Windows NTP Server Enabled

Open in new window

joejmcnultyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ryansotoCommented:
0
joejmcnultyAuthor Commented:
Does this problem appear to be a time zone issue or a GPO issue? I don't want to change time zones if there is a wts sync problem.
0
ryansotoCommented:
You can check the error logs for sync issues and if you see none its probably a time zone issue in which the link I gave will allow you to set the time zone for all machines :)
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

joejmcnultyAuthor Commented:
I put that script in the computer startup section of the domain GPO, restarted one of the client machines in question, but it did not change. Any ideas?
0
ryansotoCommented:
where exactly did you put that script?
0
joejmcnultyAuthor Commented:
\\server\profiles\time zone.cmd

I put it in the profiles folder because all users have rights to that. But I guess it doesn't matter. Or does it?
0
ryansotoCommented:
Log on scripts go here
C:\Windows\Sysvol\Sysvol\ Domain_name\Scripts
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
joejmcnultyAuthor Commented:
Sorry it took me so long to accept this. It worked, but that script had to go in a slightly different place, but you put me on the right track. Thanks for the help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.