Change Time in AD

HI i have one domain and 3 sites i have DC in each site and 200 client and other servers connected and joined this domain my concern i found that the time in domain it,s late for 3 minutes and i want to change it if i do that any thing will happened i mean no problem with that ?
it-qatarAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lruiz52Commented:
Best practice is to sync you DC to an Internet time server? Check the link below.

http://aocampom.wordpress.com/2011/01/27/configure-a-time-server-for-a-domain-controller/
0
it-qatarAuthor Commented:
but im not from US which server i have to chose and if i update the time any thing will happened to my client and servers ???
0
Glen KnightCommented:
You can change the time and the other servers/clients should update from the DC.

You may find problems accessing some resources if the time is different on servers/clients.  If this happens simply restarting the Windiws Time service will fix the problem.
0
IT Pros Agree: AI and Machine Learning Key

We’d all like to think our company’s data is well protected, but when you ask IT professionals they admit the data probably is not as safe as it could be.

it-qatarAuthor Commented:
how i can know my DC if it's taking time from internet or somewhere else ?
0
Glen KnightCommented:
If you open the registry and navigate to:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time\TimeProviders\Parameters

What do you have listed under NTPSERVER?
0
Glen KnightCommented:
Also what's listed in the Value Type?
0
lruiz52Commented:
check the time below and choose a time server close to you.
http://www.pool.ntp.org/en/

command to check time server
net time /querysntp
0
Glen KnightCommented:
External time servers generally are unreliable unless you subscribe to the service.

And the command should be w32tm not net time
0
it-qatarAuthor Commented:
If you open the registry and navigate to:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time\TimeProviders\Parameters

What do you have listed under NTPSERVER?

 NTIME
0
Glen KnightCommented:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time\TimeProviders\Type

Sorry that should have been the above
0
it-qatarAuthor Commented:
there is nothing like this only under TimeProviders:
NTPSERVER
NTPCLIENT
VMICTIMEPROVIDER
0
Glen KnightCommented:
So sorry, I am doing this from memory.

It should be:


HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time\Parameters
0
it-qatarAuthor Commented:
OK find it down :
Untitled.png
0
Glen KnightCommented:
NT5DS says you are not using an external time source.
0
it-qatarAuthor Commented:
so what i have to do ???
0
Glen KnightCommented:
As I said in my first post.  Set the correct time on your DC and allow the clients to update themselves.
0
it-qatarAuthor Commented:
what do you mean allow the client to update themselves my client dose not have any idea abut this and i don,t want to give permissions for this
0
Glen KnightCommented:
Clients as in workstations.
They will update their time from the server.  See my first post.
0
David Johnson, CD, MVPOwnerCommented:
Changes NT5DS to NTP

This will use time.windows.com as the authoritative time source.. use this on your pdc
the clients should use the PDC as their time source
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\Parameters]
"ServiceDll"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,\
  00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  77,00,33,00,32,00,74,00,69,00,6d,00,65,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceMain"="SvchostEntry_W32Time"
"ServiceDllUnloadOnStop"=dword:00000001
"Type"="NTP"
"NtpServer"="time.windows.com,0x9"

Open in new window

0
Glen KnightCommented:
There is no need to do this unless you really want to syncronise with an outside time source?!

I personally have never found time.windows.com to be very reliable but this may well be because I am not based in the US.
0
it-qatarAuthor Commented:
can i simple way change the time in the RDC (root DC) and then all client will sync with the server ??
0
Glen KnightCommented:
>>>can i simple way change the time in the RDC (root DC) and then all client will sync with the server ??

Yes, that's the way it's designed to work, which is what I said in my initial post.
0
it-qatarAuthor Commented:
Thank You very Much demazter only one last question im afraid that some user will try to login but because the time in thier machines is not the same time in DC maybe will not allow users to access their account this could happened ?
0
Glen KnightCommented:
It might, but restarting the computer and/or the Windows Time service should resolve this.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Applications

From novice to tech pro — start learning today.