Avatar of Harjeet Singh
Harjeet Singh
Flag for United Kingdom of Great Britain and Northern Ireland asked on

windows domain time server setup

Hello Experts

we are having some issues with windows time update, we have 3 domain controllers.

cts-dc  (very first domain controller when we built domain, this is a virtual server on hyper V)
cts-dc-bkup (Second domain controller, this is virtual server on Hyper V)
dbs-dc-bkup (this is thired domain controller that we recently added to domain for safe side, this is physical server)

as we knows time update causes troubles on DC being virtual machines.
can someone guide me how to setup
dbs-dc-bkup  (as our main time source in domain so that all other domain controllers and computers on domain should get time from this.) also this physical domain controlle should get time from internet.

thanks.
Harry
Windows Server 2008Microsoft Virtual ServerInternet Protocols

Avatar of undefined
Last Comment
Harjeet Singh

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
DrDave242

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Harjeet Singh

ASKER
Hello DrDave
PDC and FSMO are on "CTS-DC" that's our Virtual Server as domain controller.
DrDave242

OK, I would definitely recommend disabling time sync in the Hyper-V integration services, especially if the host server is a domain member.  Otherwise you can end up with your PDC Emulator trying to sync with the host, which in turn is trying to sync with the PDC Emulator.  This obviously results in time drift.
Harjeet Singh

ASKER
yes actually time sync from hyper v Host to virtual DC is allready disabled, but still domain controller time keep gettig behind say 2-3 minutes every week.

looks like its not getting time from internet properly.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
DrDave242

Have you verified the registry settings in the article I linked to (specifically in the "Let me fix it myself" section of Configuring the Windows Time service to use an external time source)?
Harjeet Singh

ASKER
i will do that tmmrw, So i should apply Microsoft auto fix to configure cts-dc to get time from external source.

and leave rest of the DCs as these are now.

i will try later on.
thanks
DrDave242

The auto-fix should work (it will make the same registry changes), but I don't know if it will allow you to pick which external time servers you want to sync with.  It may just pick time.windows.com for you.  Now, I've personally never had problems with time.windows.com, but I know of others who have.  I would personally prefer to go through the registry settings myself.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Harjeet Singh

ASKER
sure i will do regedit, and will update here .  thanks. speak to you later here.