2008 Domain - System time is off

I have one subnet on my network with 60 computers, "2x Physical 2003 servers" and "5x 2008 R2 (VMWare) virtual servers".   One of the VM 2008R2 servers is the DC with FSMO roles and one older physical  2003 server is a second DC.  It is a 2008 domain.

The time on the  servers and workstations is 25 minutes slow from the real time.

How and where do I get the time straigtened out on the workstation and ALL the servers?  

Thank You
howmad2Asked:
Who is Participating?
 
howmad2Author Commented:
I ended up configuring my VMWARE hosts (esxi 5) with an external atomic clock.  Then went to each VM server and, from the systray, configured VMWARE TOOLS to use the host for time.  On any physical servers and workstations I restarted the Windows Time service OR rebooted the machines.
0
 
Spyder2010Commented:
You can use the following article to configure time on your PDC Emulator, should be your 2008 DC that's holding the FSMO roles, assuming it's holding all of them.
http://technet.microsoft.com/en-us/library/cc786897(v=ws.10).aspx

Here is a list of external ntp servers to sync your PDC Emulator with.  Once the PDC Emulator is getting correct time from the NTP server, all of your other domain joined machines, servers and workstations, will use the PDC emulator for time.
http://support.ntp.org/bin/view/Servers/WebHome

FYI, you cannot have a 2008 domain while you still have 2003 domain controllers:
http://technet.microsoft.com/library/understanding-active-directory-functional-levels(WS.10).aspx
0
Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

 
Imtiaz HashamTechnical Director / IT ConsultantCommented:
Your domain controller would work as a NTP Server.  Search for configuring the DC to use an external  NTP Server to get the correct time.
0
 
howmad2Author Commented:
So I set the following on the "2008DC/FSMO" server..

      w32tm /config /manualpeerlist:”ntp1.fabrikam.com ntp.contoso.com  
      time.fineartschool.net” /reliable:yes /update

Since I have several servers and workstations, can I execute this command at any point in the day without creating a problem?  Is there anything I have to do on the  other servers and workstations to make them look to this server for time?

Thank You
0
 
Imtiaz HashamTechnical Director / IT ConsultantCommented:
i would follow this article for the DC:

http://support.microsoft.com/kb/816042

and ensure the PCs have the DC as the NTP Server using GPO.  Please ensure you do this on the GC first and if you want multiple time sync servers (because you have multiple DCs with the GC role) you can do that too.
0
 
Imtiaz HashamTechnical Director / IT ConsultantCommented:
what you are doing is:  instead of everyone going to the internet for time sync, they are going to the DC and it is checking itself against the atomic clocks.
0
 
howmad2Author Commented:
This worked for me.  I m not sure if one of the other solutions would have worked as well.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.