Domain member time offset from domain controller

Posted on 2011-09-12
Last Modified: 2012-05-12
Hi Experts,

We have some servers that recently joined the domain, some of the servers' time seem to sync with DC fine, while the others just off a minute or so.

The config of these servers is pretty much identical.

Any advice will be appreciated.

Question by:jimmy1829
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 59

Expert Comment

by:Darius Ghassem
ID: 36526231
LVL 17

Expert Comment

by:Tony Massa
ID: 36526500
Are these VMs?  Disable the VMTools option to sync with the HOST time.
LVL 10

Accepted Solution

abhijitwaikar earned 250 total points
ID: 36526714
Are these members within +/- 5 minutes range?

By default, the domain controller will broadcast time to all clients. It has a phase offset of +/- five minutes, that you can see within the authoritative time server article below. This phase offset means, if clients are more than or less than 5 minutes off the domain controller time, they will synchronize their time with the server, you can reduce that phase offset on the domain server. That will help your clients keep a little more accurate time.
Why Off-Site Backups Are The Only Way To Go

You are probably backing up your data—but how and where? Ransomware is on the rise and there are variants that specifically target backups. Read on to discover why off-site is the way to go.


Author Comment

ID: 36526977
Thanks guys,

These are physical servers, and yes, they are all in +/-5 mins range. Does that mean everything is fine?
LVL 17

Expert Comment

by:Tony Massa
ID: 36527064
As long as your servers have the successful W32Time entries, you should be fine

Author Comment

ID: 36527107
Thanks again,

So for the maxallowedphaseoffset setting, do I configure that on the domain controller as a group policy to apply to the proper OU?
LVL 17

Assisted Solution

by:Tony Massa
Tony Massa earned 250 total points
ID: 36527143

I would make sure that you're following best practices in the TechNet article above.  There generally shouldn't be any need to configure any of the client settings unless you have time-sensitive applications.  Make sure that you're servers have the default settings and then make any adjustments you may need.

Author Comment

ID: 36527155
thanks guys, it works like a charm!

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question