How to setup time sync for all servers on domain?

Hi,
How can I setup time sync for all servers on domain?
Phucnguyen01Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ahoffmannCommented:
depends on your OS, in Unix/linux you configure ntp in /etc/ntp.conf and start the ntpd daemon, ready
0
CoccoBillCommented:
In Windows 2000 or later AD the clocks are synchronized automatically between members of the domain. The DC holding the PDC Emulator FSMO role in the root domain will automatically act as the trusted time source, and all other servers (and workstations) will get their time from it using NTP. Just set the PDC Emu to get its time from a reliable time source. The pre-requisite for the sync to work is that the time difference between machines is not greater than 1 hour (at default settings) or the syncing will fail.

http://technet2.microsoft.com/windowsserver/en/library/71e76587-28f4-4272-a3d7-7f44ca50c0181033.mspx?mfr=true
0
Phucnguyen01Author Commented:
Hi CoccoBill,
Can you please tell more detail how to set up time sync all servers? Thanks
0
Managing Security & Risk at the Speed of Business

Gartner Research VP, Neil McDonald & AlgoSec CTO, Prof. Avishai Wool, discuss the business-driven approach to automated security policy management, its benefits and how to align security policy management with business processes to address today's security challenges.

CoccoBillCommented:
Run this on your PDC Emulator:

To Synchronize an Internal Time Server with an External Time Source

1. To open a command prompt, click Start, click Run, type cmd, and then click OK.
 
2. Type the following, where PeerList is a comma-separated list of Domain Name System (DNS) names or Internet protocol (IP) addresses of the desired time sources:

w32tm /config /syncfromflags:manual /manualpeerlist:PeerList
and then press ENTER.
 
3. Type w32tm /config /update, and then press ENTER.

Notes: The most common use of this procedure is to synchronize the internal network's authoritative time source with precise external time source. This procedure can be run on any computer running Windows 2000, Windows XP, or an operating system in the Windows Server 2003 family. If the computer cannot reach the servers, the procedure fails and an entry is written to the Windows System event log.
 
Check out this list and choose a couple stratum 2 or pool NTP servers close to you to use as your NTP peers:

http://support.ntp.org/bin/view/Servers/WebHome#Finding_A_Time_Server
0
Phucnguyen01Author Commented:
This run manually? Is there any way we can run automatically by setting period of time? Thanks
0
CoccoBillCommented:
You just need to do it once. That sets your PDC Emu to use the external time sources                                                                                                                                                                                                                                                                                                                                                                                                                                                 as its time source, all domain members will use the PDC Emu as their source. Everything will work automatically from then on. Check the technet link I posted earlier.
0
Phucnguyen01Author Commented:
Hi CoccoBill,
What does PDC emulator mean?
How do we check that this sync run automatically? And what period of this running? Thanks
0
CoccoBillCommented:
The domain controller holding the pdc emulator FSMO role:

http://technet2.microsoft.com/windowsserver/en/library/ae59de9b-9899-40b1-84cf-4a0590bd948e1033.mspx

To make sure its working, look for W32time events in the event logs. You can change the related settings with registry entries, the w32time command or GPOs:

http://technet2.microsoft.com/windowsserver/en/library/b43a025f-cce2-4c82-b3ea-3b95d482db3a1033.mspx?mfr=true
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.