Link to home
Start Free TrialLog in
Avatar of Harjeet Singh
Harjeet SinghFlag for United Kingdom of Great Britain and Northern Ireland

asked on

windows domain time server setup

Hello Experts

we are having some issues with windows time update, we have 3 domain controllers.

cts-dc  (very first domain controller when we built domain, this is a virtual server on hyper V)
cts-dc-bkup (Second domain controller, this is virtual server on Hyper V)
dbs-dc-bkup (this is thired domain controller that we recently added to domain for safe side, this is physical server)

as we knows time update causes troubles on DC being virtual machines.
can someone guide me how to setup
dbs-dc-bkup  (as our main time source in domain so that all other domain controllers and computers on domain should get time from this.) also this physical domain controlle should get time from internet.

thanks.
Harry
ASKER CERTIFIED SOLUTION
Avatar of DrDave242
DrDave242
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Harjeet Singh

ASKER

Hello DrDave
PDC and FSMO are on "CTS-DC" that's our Virtual Server as domain controller.
OK, I would definitely recommend disabling time sync in the Hyper-V integration services, especially if the host server is a domain member.  Otherwise you can end up with your PDC Emulator trying to sync with the host, which in turn is trying to sync with the PDC Emulator.  This obviously results in time drift.
yes actually time sync from hyper v Host to virtual DC is allready disabled, but still domain controller time keep gettig behind say 2-3 minutes every week.

looks like its not getting time from internet properly.
Have you verified the registry settings in the article I linked to (specifically in the "Let me fix it myself" section of Configuring the Windows Time service to use an external time source)?
i will do that tmmrw, So i should apply Microsoft auto fix to configure cts-dc to get time from external source.

and leave rest of the DCs as these are now.

i will try later on.
thanks
The auto-fix should work (it will make the same registry changes), but I don't know if it will allow you to pick which external time servers you want to sync with.  It may just pick time.windows.com for you.  Now, I've personally never had problems with time.windows.com, but I know of others who have.  I would personally prefer to go through the registry settings myself.
sure i will do regedit, and will update here .  thanks. speak to you later here.