Solved

Timesync domain via policy + monitor (Windows  2008/2003 mixed domain)

Posted on 2012-03-29
2
252 Views
Last Modified: 2012-04-12
Hi,

I have posted a question regarding timesync some time ago: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_27578837.html

I just wonder if it is not simpler to set timesync via policy? Why was suggested to do it manually as there is a policy available? Then again it seems to cause issues by default: http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2010/09/10/active-directory-time-sync-broken-by-default.aspx

Please advise how to configure it + check for correct config/get alerts if issues.

J.
0
Comment
Question by:janhoedt
2 Comments
 
LVL 13

Expert Comment

by:Sandy
ID: 37781885
You need to setup Win32Time service or you also can use NTP
0
 
LVL 26

Accepted Solution

by:
Leon Fester earned 500 total points
ID: 37784457
In your original post, the question being answer was "How do I set this dc to sync with an external timeserver, f.e. ntp.pool.org?"

I wouldn't do that via Group Policy.

However configuring your clients would easier when configured via Group Policy.

The domain is already activated to configure time sync via the domain hierarchy...which is a builtin algorhythm for find an authoritative time source on your network.
http://technet.microsoft.com/en-us/library/cc773013(v=ws.10).aspx

If you've followed the recommendation then your PDCe is configured as an authoritative time server and will offer time sync information.

When you're using a non-standard configuration or domain hierarchy time sync is not working, then it's advisable to setup they servers/workstation to find the time server via Group Policy.

Also, in secure environments you want to lock down your client configurable settings to prevent malicious activities from users, so you'd want to lock down such settings via GPO.

Link to GPO values that you can set for time sync.
http://technet.microsoft.com/en-us/library/cc773263(v=ws.10).aspx#w2k3tr_times_tools_vwtt
0

Featured Post

Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now