Set Windows (non domain joined) member server to sync time with a domain controller.

Hi

I have a few servers that live in our DMZ that I wish to sync with our domain controller that is on the inside network.  These servers in the DMZ are not joined to the domain and are also running inside a Hyper V virtual machine which I believe is what is causing the time drift

The servers all run Windows Server 2008 R2.

So I am wondering how to set these servers to sync with the domain controller that is inside the private internal network.

I also understand firewall rules would need to be adjusted order for the servers in the DMZ to communicate with the domain controller.

I've been researching this, but am getting a lot of conflicting information, and some article indicate there is no concrete fix to get a non domain server to time sync with a Windows domain controller.

Looking for help,

Thank you!
paradigm_ISAsked:
Who is Participating?
 
vmdudeConnect With a Mentor Commented:
Try running the following command instead, this will tell you if you have any NTP time providers configured on your domian.

w32tm /query /configuration

My advice would be to first get the domain controller holding the PDC FSMO role (not sure how big your environment is so could all be the same server) syncing with a reliable NTP server I normally use ones from the following site http://www.pool.ntp.org/en/ 

To configure NTP is actually fairly straightforward the following commands will do it

C:\> w32tm /config /manualpeerlist:"0.pool.ntp.org,1.pool.ntp.org,2.pool.ntp.org" /syncfromflags:manual
C:\> w32tm /config /update
C:\> w32tm /resync
0
 
vmdudeCommented:
How do your domain controllers keep time? Are they syncing with an external NTP time source? If so one option you might consider is allowing the servers in the DMZ to sync to the same NTP host.

Maybe not the answer you are looking for but just thought I'd throw it our there :)
0
 
paradigm_ISAuthor Commented:
Hi vmdude

I thought of that, but part of my problem is I am not entirely certain how to determine how my domain controller is keeping it's time.

I run this command on my domain controller:

w32tm /query /source

I get this result:
Free-running System Clock

Which I *think* means it is not syncing to anything other than the onboard RTC chip.


Thanks
0
 
paradigm_ISAuthor Commented:
That did the trick.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.