A couple of days ago I had some timing issues in my domain which where caused by a bad GPO. The GPO prevented any of my DCs to advertise time services.
I have DC01 and DC02. DC01 is the PDC and when I run a dcdiag then it shows that it is distributing time services. Nice!
But what about the second domain controller DC02 which is running no FSMO - when I run a dcdiag then I see this:
The DC DC02 is advertising as a Key Distribution Center
Warning: DC02 is not advertising as a time server.
Should only the PDC advertise time services in a domain?