How Configure The time service

Posted on 2012-09-10
Last Modified: 2012-09-14
Hello I have a Windows Domain with two domain controllers, Forefront TMGm, Exchange, sharepoint and Remote Desktop Server.

All the servers are Windows 2008R2 (virtualized) running in two physical Server with Windows 2008R2.

My douby is about the time service, many times the Domain clock is out of date for some minutes.

I have joined to the domain the physical Servers.

I think that the domans controller take the time from internet and latter they push the time to all the joined pc's .


How I have to configure the Integration Service (Time synchronization) in hyper-V?

I have to put some rule in the TMG?

How can i check that all is working?

Question by:limmontreefree
    LVL 35

    Accepted Solution

    The DC with the PDC role shoud host the time service
    This server should be set to
    NTPServer =,0x2 (or any other valid server)
    Type = NTP

    All other server / clients have type = NT5DS (NTPServer doesn#t matter)
    All win 2008 / Win7 clients ask the DC automatically (by default)..
    For HyperV, disable time sync at least for the DC with PDC Role. But as all server sync with the DC as well, you can disable it at all, as long it is 2008 / Win7.

    For XP, you have to check the settings.

    Time server sttings can be set also via policies (for older server / clients)

    (mostly at the end...)

    On the PDC Emulator, you can use the following:
    W32tm /config /syncfromflags:manual /manualpeerlist:"<ip addresses>"
    W32tm /config /reliable:yes
    W32tm /config /update
    W32tm /resync
    Net stop w32time
    Net start w32time

    You can check it with
    w32tm /monitor /computers:localhost

    For TMG, just make sure that NTP protocol definition is defined.
    Should be UDP 123

    If the protocol is defined and there is any access rule for the dc to use this protocol, the request should go out.
    LVL 23

    Assisted Solution

    by:Stelian Stan
    LVL 41

    Assisted Solution

    Is your domain controller with the PDC emulator role a VM? If it is, you need to disable the hyper-v timesync option for that VM. If the PDC is  a VM with the timesync running from hyper-v the VM will get time from the host, and the host will get time from the VM, and your clocks will drift.

    Author Closing Comment

    Thanks everbody

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now