How do I disable network time for workstations and how do i make all workstations retain the right time

we deployed a windows 2008 server and joined 8 computers to the domain. all 8 computers are windows xp pro, 32 bit.

the time keeps changing on the workstations - i would like to make all computers retain the "real" time.  I would prefer to just disable the "network time" received via AD.

What is the best way to go about doing this?  should I just disable the "windows time" service?
fstincAsked:
Who is Participating?
 
da3veCommented:
Yes it is automatic. Check the time on the domain PDC emulator. Ours was losing time for some reason and our corporate guys refused to configure external NTP for a few months. Once they did everything was fine.

http://technet.microsoft.com/en-us/library/cc786897%28WS.10%29.aspx


For a more in depth look at windows domain time:

http://technet.microsoft.com/en-us/library/cc773013%28WS.10%29.aspx
0
 
Ryan WeaverInfrastructure ManagerCommented:
Unfortunately, if you stop the time sync between the domain and the members, you will start running into authentication issues as they start to grow farther out of sync.

What is happening with the time? are all the workstations and the domain controller all have the same time zone set?
0
 
fstincAuthor Commented:
yes, but the time is off by 5 minutes.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
fstincAuthor Commented:
so it's automatic (the time service) by joining the computers to the domain?
0
 
Neil RussellTechnical Development LeadCommented:
The default maximum time difference allowed is only 5 minutes so you would be unable to access the domain.

Better to fix the problem that the PDC Emulater is just not syncing externaly. Takes 5 mins to fix and then your sorted for life :D
0
 
fstincAuthor Commented:
ok am confused. looks like the server is configured correctly. i get the right time from multiple NTP servers. However, my computer (not joined to domain) and my cell phone have a different time 4-5 mins difference.  what is the correct time???
0
 
da3veCommented:
Your phone should have an option to get time from the cell network. I would verify that setting first.

You can verify the current time at time.gov.

http://time.gov/

I would compare that to your PDC time. If the server is at or near the correct time +/- 10 seconds, the rest of the domain should be synchronizing to it automatically via the w32time service. The reason is Kerberos (which is used to grant access to domain resources) is time dependent for security reasons as mentioned above by Neilsr.) The domain doesn't care what the "actual" time is, but it does need the time inside the domain to be synchronized.

For your non-domain machine, it may or may not be configured to use NTP. You will have to configure it to use NTP or join it to the domain.

An AD DS forest has a predetermined time synchronization hierarchy. The Windows Time service synchronizes time between computers within the hierarchy, with the most accurate reference clocks at the top. If more than one time source is configured on a computer, Windows Time uses NTP algorithms to select the best time source from the configured sources based on the computer’s ability to synchronize with that time source. The Windows Time service does not support network synchronization from broadcast or multicast peers.
http://technet.microsoft.com/en-us/library/cc773013%28WS.10%29.aspx

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.