DC time and client sync time?

Not sure if my setup is good& For the clients to sync time with the domain controller I have the below line included I the logon script

REM Sync workstation time to domain controller...
net time \\dc1 /set /y

Also how do I check where is the domain controller(s) is getting the time from?

TITGAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

oBdACommented:
You can safely remove that line.
To start with, users don't have permissions to set the time anyway, and an AD domain already has a time sync in place: members will sync with the DC authenticating them, DCs will sync with PDC emulator, and you only need to set the PDCe to sync with an outside source.
To do so, run the following command:
w32tm /config /update /manualpeerlist:1.2.3.4,0x8 /syncfromflags:MANUAL
w32tm /resync
Replace 1.2.3.4 with the IP address of a time server geographically near you:
A list of the Simple Network Time Protocol (SNTP) time servers that are available on the Internet
http://support.microsoft.com/?kbid=262680

You can check the event log for events from source w32time to check whether the time is syncing correctly.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TITGAuthor Commented:

I will put the line below in a DC. The clients will sync automatically no GPO for that?
w32tm /config /update /manualpeerlist:208.184.49.129 /syncfromflags:MANUAL
w32tm /resync
I have two more DCs do I run the line in them to?
 
0
oBdACommented:
No GPO and no manual intervention (except for the PDCe) is usually necessary; Kerberos requires that the time difference between DC and clients is (reasonably) small.
Add the ,0x8 after the IP address, it tells the time service to run in client mode when querying the ntp server.
You only need to run this on the PDC emulator.
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

PberSolutions ArchitectCommented:
Along with the advice above,   We also leave that net time /set command in our logon scripts for one reason...  Laptops that sit on shelves for 6 months that have dead BIOS batteries.  The time is reset and it too far our of whack to correct using w32time.  The net time in the logon script gets them going again.
0
TITGAuthor Commented:
Ran command below didn't sync?
C:\>w32tm /resync
Sending resync command to local computer...
The computer did not resync because no time data was available.
0
PberSolutions ArchitectCommented:
What computer did you issue the command on?
0
TITGAuthor Commented:
Used this instead...and it worked
w32tm /config /update /manualpeerlist:129.6.15.28,0x8 /syncfromflags:MANUAL
w32tm /resync
0
TITGAuthor Commented:

PDC checked event ID no error
 
0
oBdACommented:
Then you should be set. Note that an occasional failure of a time sync can happen--ntp is using UDP, after all. As long as there are successful time syncs, you can ignore the errors.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.