• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 792
  • Last Modified:

Windows NTP Configuratuon using VMWare Hosts

Could someone please confirm if this configuration is correct?

We have all our servers hosted within VMWare, and all workstations connect via GPO from the main DC...

Regards,
Michael Caldecott     NTP-Drawing.pdf
0
Excel
Asked:
Excel
  • 3
1 Solution
 
bgoeringCommented:
Don't do both. Sync your ESX servers with a public NTP server, your domain controller can sync with the ntp server or with an external source. All servers and workstations sync with the dc and uncheck the sync with esx box.
0
 
coolsport00Commented:
Concur with "bgoering". Configure an ATS (auth time srvr) in your domain (no group policy needed) to get its time from an external source. Configure it on a DC preferably (see this MS KB: http://support.microsoft.com/kb/816042/). Time sync will propagate to the other DCs in your org. Then, configure NTP on your ESX/i hosts to sync with the ATS in your domain. Last, make sure VMware Tools on all your VMs have the time sync with host UNCHECKED. They will get time from the DC they authenticate against.

Hope that helps.

Regards,
~coolsport00
0
 
ExcelAuthor Commented:
bgoering:

I already have the following setup, ESX hosts sync with public NTP, all VMWare systems sync with VM tools... My confusion is; as we use GPO NTP which points to our DC, do I un-tick the VM tools for those connected too the DC GPO?

And for all (non-domain connected systems) do I enable the VM tools time sync within these images?

Regards,
M
0
 
bgoeringCommented:
Yes, that is workable and the only trick to remember is to never sync with both the ESX host through vmware tools AND other methods such as your GPO NTP. If all your servers are virtual as you indicate then sync your DC that holds the PDC role either through VMware tools with the host, or directly to public time servers (remembering if you go to public servers, don't sync this one with ESX either) - it doesn't make a lot of difference which. Then make sure none of your other windows boxes are syncing with ESX - let them all pull the time from the DC infrastructure.

The biggest rule is don't do both on anything as they can end up fighting a bit over who is correct and you will have small corrections either way going on all the time.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now