Solved

What is the best way to get all servers clock insync

Posted on 2011-02-10
3
332 Views
Last Modified: 2012-05-11
I manage 3 locations and all the servers have different clock times.  It's most annoying when a user logs on to Citrix and their computer clock is 3 minutes different than the Citrix server.  I'm using the net time  /setsntp:servername command but there's got to be a better way to this so they are all insync.
All locations have a 2008 DC
0
Comment
Question by:J.R. Sitman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 3

Accepted Solution

by:
pitchford earned 250 total points
ID: 34867422
On the PDC Emulator
To configure an external time source on the PDC emulator, execute the following command (pool.ntp.org, used here only as an example):
w32tm /config /manualpeerlist:pool.ntp.org /syncfromflags:MANUAL /update
Always restart the windows time service (w32time) when making any changes:
net stop w32time && net start we32time
To force synchronization with the external time source:
w32tm /resync
To verify the time source you just set:
w32tm /query /source

On Domain Members
To synch  a domain member server or workstation to the domain hierarchy, execute:
w32tm /config /update /syncfromflags:DOMHIER
restart W32Time Services:
net stop w32time && net start w32time
To verify time synchronization  is functioning:
w32tm /query /status

SOURCE: http://www.quantumofgeek.com/2010/03/time-synchronization-in-server-2003-and-2008-active-directory-domains/
0
 

Author Comment

by:J.R. Sitman
ID: 34867483
Can you clarify your example with exactly what I would use?  I'm guessing somewhere in the command should be our domain name?  laspca.corp
I obviously don't want to have to do this to every server and workstation.  If there a GPO?
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 34871185
I like to use a GPO with a WMI filter to set the PDCe to use an external NTP, and let the domain hierarchy do the rest.

http://adfordummiez.com/?p=67

It's easy to configure, no extra work if you move the PDCe role to another DC, and it don't tattoo the registry.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question